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Aligning  strategy  and  technology  has  undeniable 
benefits.  But  how  exactly  does  a  business  achieve 
it?  Accenture's  groundbreaking  study  of  over  500 
high  performers,  as  well  asour  hands-on  experience 
with  high-performance  businesses,  has  given  us 
unique  insights  into  what  works,  what  doesn't 
and  why.  Drawing  on  this  knowledge,  Accenture 
helps  bridge  the  gap  between  an  organization's 
IT  systems  and  capabilities  and  its  strategic  vision 
for  high  performance. 
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•  Portals  &  Content  Management 

•  Data  Management  &  Architecture 
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Systems  Integration  Consulting 

•  Enterprise  Systems -Oracle  and  SAP 

•  Industry  Solutions 

•  Functional  Solutions-CRM,  HR,  Supply  Chain,  Finance 

•  Technology  Architecture 

•  Business  Process-driven  Service-oriented 
Architecture  (SOA) 

Disruptive  Technology  R&D 

•  Enterprise  Mashups  &  Widgets 

•  Cloud  Computing 

•  Predictive  Analytics 


Visit  accenture.com/itconsulting 


•  Consulting  •  Technology  •  Outsourcing 


IT  Consulting  for  High  Performance 
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Alt  we  are  saying  is  give  perfectly 
good  hardware  a  chance. 

VoIP  is  the  future.  So  step  into  it. 
Not  by  ripping  and  replacing,  but  by 
sticking  with  the  here  and  now.  It's 
possible  because  now  moving  to  VoIP 
isn't  about  hardware. 


It's  about  software. 


You  can  keep  your  hardware — your 
PBX,  your  gateways,  even  your  phones. 
Simply  move  to  VoIP  with  software. 
Software  that  integrates  with  Active  ... 
Directory"  Microsoft"”  Office,  Microsoft 
Exchange  Server,  and  your  PBX. 

Maximize  your  current  PBX  and 
phone  investment  and  make  it  all  part 
of  your  new  software-based  VoIP 
solution  from  Microsoft.  Your  hardware 


is  ready  when  you  are.  Learn  more  at 
microsoft.com/voip 


Your  potential.  Our  passion. 


Work  with  InterSystems. 


Not  separate  systems. 


The  fastest  way  to  have  a  connected  workplace. 


Work  with  InterSystems  Ensemble®  software  to  raise 
productivity  and  lower  costs. 

Ensemble  is  a  rapid  integration  and  development 
platform  that  makes  it  much  easier  to  connect  applications, 
processes,  and  people.  IT  managers  who  have  switched 
from  other  integration  products  report  they  can  finish 
projects  in  half  the  time  with  Ensemble. 

For  your  future  development  efforts,  if  you  embed 
Ensemble  you  can  create  a  new  class  of  applications  that 
are  connectable.  Plus,  you’ll  be  able  to  enhance  legacy 
applications  with  adaptable  workflow,  browser-based  user 


interfaces,  rules-based  business  processes,  dashboards, 
and  other  innovations  -  without  rewriting  your  code. 

Ensemble’s  technology  stack  includes  the  world's 
fastest  object  database  -  InterSystems  Cache®.  Cache's 
lightning  speed,  massive  scalability,  and  rapid  development 
environment  give  Ensemble  unmatched  capabilities. 

For  30  years,  we’ve  been  a  creative  technology 
partner  for  leading  enterprises  that  rely  on  the  high 
performance  of  our  products.  Ensemble  and  Cache  are 
so  reliable  that  the  world’s  best  hospitals  use  them  for 
life-or-death  systems. 


IhierSysiems 

See  product  demonstrations  at  InterSystems.com/Connectl4F 


©  2008  InterSystems  Corporation.  All  rights  reserved.  InterSystems  Ensemble  and  InterSystems  Cache  are  registered  trademarks  of  InterSystems  Corporation.  Other  product  names  are  the  trademarks  of  their  respective  vendors.  7-08  Workl4  CIO 


Nehal  Trivedi,  CIO  with  Title  Resource  Group,  cut  cell  phone  bills  with 
a  corporatewide  policy  for  devices  and  usage. 
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We’re  Listening 

Because  customer  feedback  is  a  powerful  thing 

This  year,  I'm  spending  a  lot  of  time  on  the 
road  meeting  with  CIOs  in  their  offices.  So  much 
is  changing  in  business  right  now,  and  it’s  hard 
to  get  a  feel  for  what’s  really  going  on  from  my 
perch  overlooking  the  Massachusetts  Turnpike 
in  Framingham. 

In  one  meeting  a  few  months  ago,  I  asked  the 
CIO  of  a  large  company  on  the  West  Coast  what 
more  we  at  CIO  could  do  for  her.  This  was  some¬ 
one  at  the  top  of  her  game.  She  has  great  alignment 
with  the  other  business  leaders  in  her  company,  a  high-performing  senior  leadership 
team  in  IT,  excellent  project  management  discipline,  impressive  metrics  surrounding 
everything  she  does.  I  asked  the  question  because  I  ask  it  of  everyone.  But  I  asked  it 
not  really  expecting  to  get  much  back— I  mean,  what  more  could  she  need? 

“You  know  what  I’d  really  love?”  she  asked.  “I’d  love  it  if  you  could  bring  me 
examples  of  people  doing  things  that  take  less  than  three  months  to  implement 
and  that  have  a  payback  of  a  year  or  less.” 

Thus  was  born  “Quick  Wins,”  our  cover  story  (by  Senior  Editor  Kim  S.  Nash, 
beginning  on  Page  30).  Kim’s  story  profiles  five  quick  wins,  but  there’s  lots  more 
out  there.  We’ll  be  collecting  and  sharing  those  in  an  ongoing  series  as  long  as  the 
economic  downturn  lasts. 

What’s  interesting  about  this  particular  slump  is  that  a  lot  of  people  are  not 
responding  to  it  in  a  traditional  way.  Bruce  Rogow,  a  very  smart  guy  who  also 
spends  a  lot  of  time  on  the  road  meeting  with  CIOs  in  his  “CIO  Odyssey”  visits, 
put  it  this  way  in  a  recent  conversation:  “CIOs  are  saying,  ‘Recession?  I  don’t  have 
time  for  no  stinking  recession.’”  They’re  living  in  a  world  of  “double  or  die,”  he 
says.  They  have  to  double  the  capabilities  IT  provides  to  the  business,  and  they’re 
not  getting  much,  if  any,  increase  in  their  budgets  to  deliver  it. 

That  money  has  to  come  from  somewhere,  and  IT  executives  are  finding  a  way. 
On  one  of  my  last  trips,  CIOs  were  talking  about  how  they’re  shifting  capability 
while  keeping  spending  flat.  One  airline  industry  exec  said  that  six  years  ago  the 
split  was  70  percent  on  baseline,  or  “run  the  business”  spending,  and  30  percent 
was  for  new  investment.  Today  they’ve  almost  completely  turned  that  around,  to 
40/60.  That’s  pretty  incredible. 

Have  you  found  a  way  to  get  some  quick  wins  this  year?  Let  me  know  about  it 
and  we  may  feature  your  company  in  an  upcoming  issue  of  CIO. 


Abbie  Lundberg,  Editor  in  Chief 

lundberg(a)cio.com 
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The  Big  Shift 

It’s  inevitable  that  America  will  lose  its 
technology  edge 


America's  days  as  the  center  of  the  IT  universe 
are  waning  quickly.  Or  so  goes  Yuasa’s  Law. 

Mitsutomo  Yuasa  was  a  20th-century  Japa¬ 
nese  physicist  and  historian.  In  1962  he  wrote  an 
essay,  “The  Shifting  Center  of  Scientific  Activity 
in  the  West.”  The  seminal  point  of  the  essay  was 
this:  Since  the  1500s,  centers  of  scientific  activity 
have  shifted  from  one  country  to  another  roughly 
every  80  to  100  years. 

He  traces  the  Western  centers  from  Italy 
(1540-1610),  to  England  (1660-1730),  France  (1770-1830),  Germany  (1810-1920) 
and  the  United  States  (1920  to  the  present).  Since  Yuasa  wrote  the  essay  in  1962, 
that  year  is  the  “present”  for  the  United  States,  not  2008. 

Let’s  look  at  IT  through  his  lens.  From  1957  (51  years  ago)  through  the  1980s, 
nearly  every  revolutionary  IT  advance  was  American-born.  But  from  1990  for¬ 
ward,  non-American  centers  have  produced  the  most  significant  innovations. 
Consider  the  World  Wide  Web  (invented  by  Brit  Tim  Berners-Lee  at  CERN,  the 
European  Organization  for  Nuclear  Research),  Linux  (by  Finnish  tech  exec  Linus 
Torvalds)  and  search  (by  a  Canadian  company,  Archie). 

I  would  argue  the  shift  foretold  by  Yuasa  is  happening  to  America.  This  time, 
innovation  won’t  move  to  another  country.  Rather,  it  will  be  to  the  global,  border¬ 
less  community  connected  24/7  by  the  Internet. 

What’s  your  take?  Is  America’s  run  as  the  center  of  the  global  IT  world  coming 
to  an  end?  Is  that  a  good  or  bad  thing  for  our  country? 


Gary  Beach,  Publisher  Emeritus 

gbeach(a)cio.com 
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Information  security,  privacy  &  data  protection  are  management  issues  with  global  business 
implications.  The  associated  risks  of  doing  business  today  need  to  be  clearly  understood  in 
order  to  effectively  manage  your  business  and  protect  your  organization. 


Managing  information  security  &  privacy  risk  at  the  enterprise  level  enables  companies 
to  achieve  more  efficient  and  effective  security  and  data  protection  processes  and 
programs.  Issues  such  as  stakeholder  value,  consumer  confidence,  brand  and  reputation 
protection,  and  legal  and  regulatory  compliance  can  be  addressed.  The  Security  &  Privacy 
professionals  of  Deloitte  help  you  take  advantage  of  this  dynamic  situation  while  helping 
to  manage  security  risk.  With  the  largest  security  and  risk  practice  in  the  world, 
we  can  help. 


As  an  industry  leader  offering  global  security  and  privacy  solutions,  we  are  focused  on 
delivering  excellent  client  service  through  a  network  of  offices  in  nearly  1 50  countries. 


Our  Security  &  Privacy  practice  offers  a  broad  array  of  services  and  solutions 
in  the  following  areas: 


•  Security  Management 


•  Privacy  &  Data  Protection 

•  Identity  and  Access  Management 

•  Application  Integrity 

•  Business  Continuity  Management 

•  Vulnerability  Management 

•  Infrastructure  &  Operations  Management 


"Deloitte  is  a  Leader  in  Security  Consulting  with  Solid  Depth  and  Global  Reach." 

"The  Forrester  Wave™:  Security  Consulting,  Q3  2007",  September  2007 

"Deloitte  is  best  suited  for  combined  security  and  risk  management  solutions." 

"The  Forrester  Wave™:  Security  Consulting,  Q3  2007",  September  2007 
Visit  us  online  at  www.deloitte.com/us/secqrity/CI03 
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About  Deloitte 

As  used  in  this  document,  "Deloitte"  means  Deloitte  &  Touche  LLP,  a  subsidiary  of  Deloitte  LLP.  Please  see 
www.deloitte.com/us/about  for  a  detailed  description  of  the  legal  structure  of  Deloitte  LLP  and  its  subsidiaries. 

Copyright  ©  2008  Deloitte  Development  LLC.  All  rights  reserved.. 
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Beijing  Prepares  for  “High-Tech  Olympics 


All  over,Beijing, 

Olympic  countdown  clocks  tick  off  tjie  seconds-until 
Aug.  8, 2008,  at  8:00  p.m.,  when  the  opening  ceremo¬ 
nies. of  the  Beijing  Olympic  Games  begin. 

But  for  China,  the  most  important  competition 
began  in  2000,  when  Beijing  was  awarded  the  right  to 
host  the  2008  Olympic  Games.  Like  firing  a  starter’s 
pistol,  the  award  began  the  race  to  build  the  IT  infra¬ 
structure  to  stage  and  support  one  of  the  world’s 
largest  sporting  events.  Producing  a  “high-tech  Olym¬ 
pics”  was  one  of  the  Beijing  Organizing  Committee's 
(BOCOG)  objectives.  With  a  published  operating  bud¬ 
get  of  $2  billion,  BOCOG  estimates  the  technology  por 
tion  of  the  budget  at  more  than  $400  million. 


Preparing  for  the  Olympics  is  like  no  other  feat  of 
project  management.  Leading  the  charge  is  Jeremy 
Hore,  chief  integrator  of  the  2008  Olympics.  Hore 
spent  six  months  with  his  company,  Atos  Origin,  work¬ 
ing  on  the  Athens  Games,  and  another  six  weeks  on  the 
2006  Winter  Games  in  Turin,  Italy.  “The  most  difficult 
thing  is  that  the  deadline  is  fixed,”  he  says.  “On  other 
projects,  you  can  delay  if  you  need  to,  even  if  it  has  a 
bad  impact.” 

There  are  also  limitations  on  which  vendors’  equip¬ 
ment  and  services  may  be  used.  “You  don’t  have  much 
control  over  choices  because  of  sponsorships  and  part¬ 
nerships,”  says  Hore. 

IT  planning  for  the  Games  Continued  on  Page  14 


Endpoint  Security  Holes  an  Open  Door  for  Attackers 


security  Everyone  knows 
that  there's  no  such  thing  as  100 
percent  security,  but  it’s  unlikely 
that  most  businesses  realize  how 
insecure  they  really  are.  Now,  new 
research  on  endpoint  security 
exposes  their  vulnerability. 

Eighty-one  percent  of  corporate 
endpoints  probed  by  IT  security 
and  control  product  vendor  Sophos 
failed  basic  security  tests,  either  by 
lacking  Microsoft  security  patches, 
having  disabled  client  firewalls  or 
missing  endpoint  software  updates. 


For  40  days,  Sophos  ran  its 
Endpoint  Assessment  Test,  a  free, 
online  scanning  service  that  checks 
for  endpoint  security  vulner¬ 
abilities.  The  test  was  performed 
against  583  corporate  endpoints 
from  around  the  world.  Test  results 
showed  that  63  percent  were  miss¬ 
ing  at  least  one  Microsoft  security 
patch;  more  than  half  had  their 
client  firewalls  disabled;  and  15 
percent  had  out-of-date  or  disabled 
endpoint  security  software. 

“Ultimately,  machines  that  fail 


such  a  test  represent  ‘low-hanging 
fruit’  for  cybercriminals  and  a  real 
danger  to  their  corporate  networks,” 
Bill  Emerick,  vice  president  of 
product  management  for  Network 
Access  Control,  said  in  a  statement. 

Sophos  says  39  percent  of  those 
tested  were  part  of  an  organization 
with  fewer  than  100  employees;  36 
percent  had  between  100  and  1,000 
employees;  and  25  percent  were 
from  organizations  with  more  than 
1,000  employees. 

-Shawna  McAlearney 
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IT  Leaders  Can’t  l**myj°b 

Get  No  Job  Satisfaction 


careers  Among  all  functional  executives,  IT  leaders  have 
the  lowest  level  of  job  satisfaction,  according  to  a  survey  con¬ 
ducted  by  executive  career  and  recruiting  network  ExecuNet.  Just 
over  half  (53  percent)  of  the  286  IT  executives  who  responded  to 
the  survey  say  they’re  satisfied  with  their  current  jobs. 

Finance  executives  expressed  the  greatest  job  satisfaction, 
with  68  percent  claiming  contentment,  followed  by  HR  (65  per¬ 
cent),  marketing  (63  percent),  general  management  (61  percent), 
sales  (54  percent)  and  bringing  up  the  rear,  IT. 

Dave  Opton,  founder  and  CEO  of  ExecuNet,  thinks  IT  leaders 
are  the  least  satisfied  executives  for  a  variety  of  reasons.  Chief 
among  them:  They’re  not  doing  work  that  truly  excites  them 
because  of  weak  economic  conditions  and  companies’  general 
reluctance  to  adopt  leading-edge  technologies. 

“The  people  who  migrated  to  IT  careers  are  motivated  and 
stimulated  by  being  able  to  work  with  things  that  are  state  of  the 
art,”  says  Opton.  “The  number  of  companies  that  are  prepared  to 
keep  their  organization  state  of  the  art  are  not  as  profuse.” 

The  other  major  reason  Opton  says  IT  executives  are  unhappy 
is  due  to  the  thankless  nature  of  their  role.  “IT,  in  many  cases, 
doesn’t  get  the  respect  that  some  of  the  other,  more  traditional 
functions,  such  as  marketing  and  finance,  get,”  he  says. 

The  results  of  the  ExecuNet  survey,  which  was  conducted 
online  from  last  November  to  January,  differ  from  research  Har¬ 
vey  Nash  Executive  Search  released  earlier  this  year  on  CIO  job 
satisfaction.  The  Harvey  Nash  study  found  that  79  percent  of 
IT  leaders  found  their  jobs  fulfilling  while  reporting  a  9  percent 
decrease  in  IT  leaders’  job  satisfaction  from  2007  to  2008. 

-Meridith  Levinson 


New  York  Tops  Tech  Jobs  List 

New  York’s  metro  area  held  tight 
to  its  status  as  the  top  U.S.  city  by  high-tech  employ¬ 
ment,  according  to  Cybercities  2008,  an  American 
Electronics  Association  report.  The  top  five  cities  pos¬ 
sess  strong  universities  and  venture  capital  markets. 

Top  Cities  by  High-Tech  Employment 

1.  New  York  Metro  Area  316,500 

2.  Washington,  D.C.  295,800 

3.  San  Jose/Silicon  Valley  225,300 

4.  Boston  191,700 

5.  Dallas-Fort  Worth  176,000 

Source.  U  S.  Bureau  of  Labor  Statistics.  2006 


Olympics 


Continued  from  Page  13 


began  in  2003.  Forty  percent  to  50 
percent  of  systems  planning  is  car¬ 
ried  over  from  the  last  Olympics  and 
adapted  to  local  conditions.  In  2004, 
Hore  and  his  team  began  designing  the 
fully  redundant  systems,  determining 
their  requirements  and  testing  needs. 
The  following  year  they  concentrated 
on  building  the  systems  and  testing 
facilities  to  fit  in  the  two  years  of  trials 
required  by  the  Olympics  committees. 
Just  as  athletes  train  for  years  for  the 
Games,  IT  people  hold  200,000  hours 
of  trials  in  total.  Atos  dedicated  about 
100  people  to  conduct  tests.  Some 
systems,  such  as  those  for  manag¬ 
ing  accommodations  for  athletes  and 
Games  personnel,  had  to  be  operational 
three  years  in  advance. 

One  new  technology  getting  a  limited 
run-out  duringthe  Olympics  is  IPv6 
(Internet  Protocol  version  6).  It  does  a 
better  job  of  supporting  applications 
like  videoconferencing  and  high- 
definition  television  than  its  predeces¬ 
sor,  IPv4,  and  offers  opportunities  for 
lower-cost  construction  of  security 
networks  and  monitoring  devices.  IPv6 
may  help  security  forces  watch  the  mil¬ 
lions  of  spectators,  but  it  is  doubtful  it 
will  help  spectators  watch  the  Games. 
Fang  Meiqin,  Senior  consultant  at  tech¬ 
nology  consultancy  and  research  firm 
BDA,  says,  “I  don’tthinkthe  ordinary 
consumer  will  notice  [IPv6  is  in  use].  It’s 
mainly  for  the  organizers’  and  govern¬ 
ment  usage.” 

So  in  terms  of  technology  advances 
enjoyed  by  visitors,  the  Beijing  Olympics 
may  fall  short.  Case  in  point:  China  is 
offering  3G  services  but  only  for  BOCOG 
affiliates  who  received  one  of  15,000 
handsets  provided  by  Games  spon¬ 
sor  Samsung.  Customers  from  other 
nations,  such  as  Japan,  Korea  and  the 
U.K.,  will  not  be  able  to  use  their  3G 
phones  in  Beijing.  -Steven  Schwankert 
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Cost  Effective  Data  Center 
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Your  data  center  hardware 

requirements  are  growing  every  day. 

With  ZT  Systems,  you  get  validated,  high-quality  servers  featuring 
the  Quad-Core  Intel®  Xeon®  processor  5400  Series  for  maximum 
performance  and  efficiency  -  but  that’s  only  part  of  the  solution.  ZT 


Systems  now  offers  customizable  programs  designed  to  enable  the 
ultimate  in  value  and  ease  of  implementation  for  organizations 
operating  infrastructure-scale  data  centers. 


Leading  Edge  Technology  -  Innovative  solutions  from  ZT  Systems  address  the  critical 
challenges  faced  by  data  centers  today.  ZT  servers  feature  high  efficiency  power  supplies  for 
cost  savings  and  improved  thermal  performance,  and  our  innovative  twin  node  servers  enable 
an  unprecedented  combination  of  density  and  value,  with  two  discreet  server  motherboards  in 
a  1U  chassis. 

Custom  Hardware  and  integration  -  ZT  Systems  works  with  data  center  management  to 
determine  the  right  mix  of  technologies  and  platforms  for  your  environment.  We  set  up 
customized  stable  platform  programs  to  extend  product  lifecycles,  improve  consistency,  and 
drive  down  total  cost  of  ownership. 

Customized  Service  and  Support  -  ZT  Systems  extends  a  flexible  range  of  service  and 
support  offerings  designed  for  data  centers.  From  full  service  support  to  customized  options  for 
clients  with  internal  support  resources,  ZT  develops  specialized  programs  tailored  to  meet  your 
specific  requirements. 

Custom  Logistics  -  Custom  logistics  options  from  ZT  Systems  are  designed  to  increase  data 
center  procurement  efficiency.  From  custom  packaging  and  palletization  to  enhanced  RA 
procedures  and  extranets,  ZT  solutions  speed  server  implementation  and  reduce  internal  costs. 

Maximum  Cost  Effectiveness  -  ZT  is  committed  to  providing  value  added  price  leadership 
within  the  high-volume  server  segment.  Our  operational  efficiencies  mean  cost  advantages  for 
you,  with  recent  comparisons  yielding  substantial  savings  over  equivalent  configurations  from 
other  major  manufacturers. 


the  green  grid" 

member 


ZT  Systems  is  a  contributing  member 
of  The  Green  Grid,  a  consortium  of 
information  technology  companies 
and  professionals  seeking  to  lower 
the  overall  consumption  of  power  in 
data  centers  around  the  globe.  With 
server  solutions  designed  from  the 
ground  up  for  energy  efficiency,  ZT 
Systems  empowers  data  center 
management  to  optimize  density  and 
power  consumption  -  and  lower  cost 
of  ownership  and  operation. 


inside 


Contact  Us  Today  to  Learn  About  ZT  Server 
Solutions  and  Data  Center  Programs 
Customized  to  Fit  Your  Needs 


ZT  Systems 

(866)888-6669 

DataCenterSaies@2TSystems.com 

www.ztsystems.com/datacenter 


Powerful. 

Efficient. 
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TREND  LI  NES 


FLEX  YOUR  IT. 
SKILLSTO  FIGHT 


volunteering  If  you  ever 
regretted  not  joining  the  Peace  Corps, 
now’s  your  chance  to  lend  your  time  and 
skills  to  a  developing  nation. 

Finca  International,  a  nonprofit  that 
provides  financial  services  to  the  low- 
income  entrepreneurs  in  Africa,  Latin 
America  and  Eurasia,  is  seeking  vol¬ 
unteers  with  IT  skills  to  help  expand  its 
mission  of  fighting  poverty. 

Finca  CIO  Jiten  Patel  says  as  coun¬ 
tries  transform  into  regulated  financial 
entities,  the  lender  is  replacingthe 
home-grown  applications  each  coun¬ 
try  has  used  to  manage  its  operations 
with  off-the-shelf  community  banking 
software.  The  new  software  will  allow 
Finca  to  expand  the  services  it  provides 
to  its  customers,  more  70  percent  of 
whom  are  women.  It  should  also  help 
streamline  processes  and  lower  operat¬ 
ing  costs  so  better  interest  rates  can  be 
offered  to  customers. 

The  organization  needs  project  man¬ 
agers,  business  analysts,  architects, 
software  quality  assurance  experts, 
Oracle  DBAs  and  Sybase  DBAs  to  help 
with  the  implementations  in  each 
region.  It  also  needs  creative  LAN  and 
WAN  experts. 

While  the  work  is  unpaid,  Finca  offers 
airfare,  room  and  board.  Most  volun¬ 
teers  are  needed  for  three  months  to  six 
months.  Patel  says  volunteers  benefit 
from  a  range  of  cultural  experiences 
and  get  to  improve  their  soft  skills. 
Interested  parties  can  contact  Patel  at 
jpatel@villagebanking.org. 

-Meridith  Levinson 
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CORRECTION  Due  to  an  editorial  error,  the 
article  “Who  You  Know... and  What  You  Know”  in  the 
July  1  issue  incorrectly  stated  the  year  that  Gerson 
Lehrman  Group’s  sales  were  $220  million.  The  sales 
figure  is  from  2007. 


Researchers  Find  New 
Ways  to  Spy  on  PCs 


data  theft  Researchers  have  developed  two  new  tech¬ 
niques—  which  seem  ripped  from  the  pages  of  spy  novels— for 
stealing  data  from  a  computer. 

Researchers  at  Saarland  University  in  Saarbrucken,  Ger¬ 
many,  read  computer  screens  from  their  tiny  reflections  on 
glasses,  teapots  and  other  objects.  A  team  at  the  University 
of  California,  Santa  Barbara,  found  a  way  to  analyze  a  video  of 
hands  typing  on  a  keyboard  to  guess  what  was  being  written. 

Computer  security  research  tends  to  focus  on  the  software 
and  hardware  inside  the  PC,  but  this  kind  of  “side-channel” 
research  looks  at  the  physical  environment.  Much  of  this  work 
has  been  top  secret.  But  side-channel  hacking  has  been  in  the 
public  eye  too. 

In  fact,  if  you've  seen  the  movie  Sneakers,  then  the  Univer¬ 
sity  of  California's  work  will  have  a  familiar  ring.  A  minor  plot 
point  in  this  1992  Robert  Redford  film  about  security  geeks 
was  the  inspiration  for  its  work.  Redford’s  character  tries  to 
steal  a  password  by  watching  video  of  his  victim  entering  it 
into  a  computer.  Redford's  character  never  gets  the  password, 
but  the  UC  researchers’  ClearShottool  might  have,  says 
Marco  Cova,  a  graduate  student  at  the  school. 

ClearShot  analyzes  video  of  hand -movements  on  a  key¬ 
board  and  transcribes  them  into  text.  The  software,  which 
uses  a  webcam,  is  accurate  about  40  percent  of  the  time. 

The  Saarland  University  team  trained  telescopes  on  targets 
that  might  catch  a  computer  monitor’s  reflection:  teapots, 
glasses,  bottles  and  spoons.  They  got  some  amazingly  clear 
pictures.  All  it  took  was  a  $500  telescope  trained  on  a  reflec¬ 
tive  object  in  front  of  the  monitor.  Michael  Backes,  a  professor 
at  Saarland’s  computer  science  department,  says  he’s  already 
demoed  his  work  for  a  government  agency,  one  that  he 
declined  to  name.  “It  was  convincing  to  these  people,”  he  says. 

The  Saarland  researchers  are  working  out  new  image- 
analysis  algorithms  and  are  training  astronomical  cameras 
on  their  subjects  in  hopes  of  getting  better  images  from  even 
more  difficult  surfaces,  such  as  the  human  eye. 

-Robert  McMillan 
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ILLUSTRATION  BY  MIROSLAW  PIEPRZYK 


T  organizations  have  always  counted  on  the  performance  and  reliability  of  Fujitsu  PRIMERGY  servers.  Thanks 
o  Cool-Safe  technology,  they  can  count  on  lower  utility  bills  and  a  smaller  carbon  footprint,  too.  Even  cooler, 
Dur  new  PRIMERGY  TX1 20  tower  server  for  small  businesses  and  SOFIOs  is  the  smallest,  quietest,  most 
mergy-efficient  tower  server  on  earth.  And  you  don’t  even  need  an  on-site  IT  staff  because  Fujitsu  PRIMERGY 
servers  include  PRIMERGY  Server  View  Remote  Management  software,  which  gives  outside  consultants  or  IT 
staff  at  headquarters  all  the  secure  remote  access  they  need.  How  cool  is  that?  To  find  out,  go  to 
ittp://us.fujitsu.com/computers/PRIMERGY, 


UGH  ENERGY-EFFICIENCY. 

\  Fujitsu  PRIMERGY  TX120  tower  server  with  a  Dual-Core  Intel ®  Xeon® 
JP  processor  uses  up  to  40  percent  less  power  than  previous  towers. 


BX620  S4  Blade  Servers 


COOL-SAFE  TECHNOLOGY. 

Bigger  fans  and  independent  air  tunnels  improve  airflow,  so 
Fujitsu  PRIMERGY  servers  can  run  faster,  cooler,  and  quieter. 


rxi20 

Tower  Server 


TX300  S3 
Tower  Server 


RX300  S3  Rack  Server 


FUJITSU 


THE  POSSIBILITIES  ARE  INFINITE 

©  2008  Fujitsu  Computer  Systems  Corporation.  All  rights  reserved.  Fujitsu  and  the  Fujitsu  logo  are  registered  trademarks  of  Fujitsu 
Limited.  Cool-Safe  is  a  trademark,  and  PRIMt-TtGV  is  a  registered  trademark,  ol  Fujitsu-Siemens  Computers  GmbH.  Intel,  Intel  Logo. 
Intel  inside,  Intel  Inside  Logo,  and  Xeon  are  trademarks  or  registered  trademarks  of  Intel  Corporation  or  its  subsidiaries  irt  the  United 
States  and  other  countries.  All  other  trademarks  and  product  names  are  the  property  of  their  respective  owners. 
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TREND LI NES 


OPERATION  BROADBAND  U.S.A. 


policy  A  group  including  FCC 
member  Jonathan  Adelstein  as 
well  as  several  high-profile  technol¬ 
ogy  executives  and  industry  advocates 
have  launched  an  initiative  to  make 
broadband  access  a  national  priority. 
Called  lnternetforEveryone.org, 
the  initiative  aims  to  foster  public  dia¬ 
logue  on  how  to  set  a  national  broadband  policy. 

Industry  luminaries  supportingthe  effort  include  Stan¬ 
ford  University  law  professor  Larry  Lessig  and  Google 
Chief  Technology  Evangelist  Vint  Cerf,  one  of  TCP/IP's 
developers. 

Broadband  advocates  have  complained  that  the  U.S. 
government  has  not  made  widespread  broadband  adop¬ 
tion  a  priority  and,  according  to  the  Information  Tech¬ 
nology  and  Innovation  Foundation,  lags  behind  several 
nations  in  purchasing  broadband  access. 

Adelstein  says  a  lack  of  a  national  policy  directly 
contributes  to  its  citizens  trailing  other  countries  in  the 


adoption  of  broadband  and  potentially  in  other  social, 
educational  and  economic  endeavors.  “The  [U.S.]  gov 
ernment  has  had  a  policy  of  benign  neglect,  and  we’re 
falling  faster  and  faster  behind,”  he  says. 

Lessig,  an  outspoken  critic  of  government  Internet 
policies,  says  lawmakers  have  allowed  a  “Neanderthal 
policy"  to  govern  access  to  broadband  for  the  ^ 
past  eight  years.  While  he  says  the  private 
business  sector  has  a  central  role  in  ensur¬ 
ing  that  people  have  access  to  broadband, 
the  Internet  touches  so  many  parts 
of  American  life  that  the  govern¬ 
ment  can  no  longer  take  a  back¬ 
seat  to  creating  policy  that  fosters 
adoption  among  its  citizens. 

Some  of  the  key  problems  sur¬ 
rounding  giving  everyone  in  the  U.S 
access  to  broadband  are  the  price 
and  lack  of  access  in  rural  areas. 

- Elizabeth  Montatbano 
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Big-Picture  CIOs  Moving  Up  and  Out 


on  the  move  CIOs  continue 
to  grow  into  executive-level  positions 
outside  of  IT. 

Medical  products  manufacturer 
Vital  Signs  promoted  its  CIO,  Alex 
Chanin,  to  COO  and  Joe 
Bayern,  a  one-time  CIO 
of  Snapple,  was  named 
president  of  energy-drink 
maker  Boo  Koo  Holdings. 

Barbara  Desoer,  who 
most  recently  served  as 
Bank  of  America’s  chief 
operations  and  tech¬ 
nology  executive,  was 
appointed  president  of  the  company’s 
consumer  real  estate  business.  And 
last  June,  Mike  Kistner  was  promoted 


Mike  Kistner 


from  COO  of  travel  services  provider 
Pegasus  Solutions  to  CEO. 

Kistner,  who  began  his  career  as 
a  programmer,  attributes  his  rise  to 
two  main  factors:  his  ability  to  solve 
business  problems  and  the 
mentoring  he  received  from 
Harvey  Jewett,  former  CEO 
of  Super  8  Motels. 

While  with  Super  8,  Kist¬ 
ner  was  able  to  move  into 
business  operations  by  dem¬ 
onstrating  an  ability  to  apply 
the  analytical  skills  he  honed 
as  a  software  developer  to 
leadingthe  hotel  chain  to  run  its  call 
center,  corporate  travel  department 
and  other  functions  more  efficiently. 


When  Kistner  became  Super 
8’s  EVP  of  operations,  he  says  he 
expressed  concern  over  his  under¬ 
standing  of  the  functions  he  was  man¬ 
aging.  Jewett's  advice?  “Determine 
objectives  and  put  together  plans  to 
execute  and  be  successful.” 

Kistner  recommends  that  IT  man¬ 
agers  who  aspire  to  move  outside  of 
IT  “look  at  the  big  picture”  and  under¬ 
stand  their  company’s  real  business 
objectives  today.  Business  problems 
don’t  always  need  to  be  solved  with 
technology.  “Focus  on  what  it  takes  to 
drive  business  forward  as  opposed  to 
what  it  takes  to  drive  IT  forward,”  he 
says.  "They  aren’t  necessarily  one  and 
the  same."  -Meridith  Levinson 


MUM* 
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Read  Meridith  Levinson's  MOVERS  AND  SHAKERS  blog  for  the  latest  moves.  Find  it  at  blogs.cio.com. 
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^Constant  assembly  required 


Legacy  vendors  should  put  them  right  in  the  box,  the  PBX  assembly  instructions  to  add  features  like  recording, 
conferencing,  ACD  queuing,  and  messaging.  We  simply  put  all  the  features  your  business  needs  in  one  IP 
PBX  application  suite  to  eliminate  the  high  price  and  headaches  of  integration  projects,  selection  of  multiple 
vendors,  and  learning  yet  another  administrative  interface.  That's  why  it's  called  "all-in-one"  and  that's  why 
our  attorneys  let  us  say  "Complete,  out-of-the-box."  No  fine  print. 


Watch  our  webinar  on-demand... 

"The  Great  Application  Escape  -  Bringing  Contact  Center  Power  to  Your  Enterprise" 

Visit  www.inin.com/webinars  to  register  for  the  free  download. 
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THE  SIMPLE  GUIDE  TO  HOSTING: 


IF  IT  NEEDS 

TO  BE  ONLINE  AND 

STAY  ONLINE 

IT  NEEDS  TO  BE  HOSTED  AT  RACKSPACE'. 

You  need  the  world's  leader  in  hosting. 

•  The  Fanatical  Support  Promise™ 

•  Industry  Leading  Service  Level  Agreements  and  Guarantees 

•  Dedicated  Support  Team  Assigned  to  Every  Customer 

•  24x7x365  Live  Support  -  No  Call  Centers 

•  Proactive  Sales  and  Support  Consultation 

•  Flexible  Hosting  Solutions  and  Services 

•  100%  Network  Uptime  Guarantee 

•  Strategic  Technology  and  Business  Partner  Relationships 


TOLL  FREE:  1-888-480-7044 
www.rackspace.com/cio 

experience  fanatical  support 
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IT  leaders  who 
can  get  past  the 
idea  that  open- 
source  CRM 
software  is  cheap 
say they  I  ike  the 
power  and  flex¬ 
ibility  of  owning 
their  own  code 


Open-Source  CRM: 
More  Control,  Less  Cost 

BY  BILLSNYDER 


CUSTOMER  RELATIONSHIP  MANAGEMENT  |  A  good  CRM  package  does 
you  no  good  if  employees  aren’t  willing  to  use  it.  Case  in  point:  IMA  Financial  Group,  a 
midsize  financial  services  company  based  in  Wichita,  Kan.  IMA  had  installed  a  com¬ 
mercial  customer  relationship  management  system  that  was  “flexible  and  configurable 
and  attractive  on  the  front  end,”  says  business  processes  manager  Jennifer  Hallam. 

But  the  seeming  advantage  of  a  vastly  configurable  system  was  irritating  her  internal 
customers— and  so  only  10  percent  to  15  percent  of  them  were  using  it. 

“The  old  system  simply  had  too  many  bells  and  whistles,”  she  says.  Even  bringing  in 
a  developer  to  simplify  the  interface  didn’t  do  the  trick,  she  adds. 

After  a  good  deal  of  internal  discussion,  the  500-employee  company  moved  users 
off  the  old  system  late  last  year  (IMA  has  asked  not  to  disclose  the  vendor’s  name)  and 
installed  ConcourseSuite  5.0,  an  open-source  CRM  solution  from  Concursive  (formerly 
Centric  CRM). 

An  open-source  application  in  an  $80  million  company?  “It  was  a  hurdle  to  get  the 
management  team  to  accept  open  source;  they  didn’t  understand  the  business  model,” 
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says  Hallam.  But  accept  it  they  did,  and 
the  package  has  been  adopted  by  90 
percent  of  the  company’s  users. 

The  Right  Fit  for  You? 

The  success  of  open-source  operat¬ 
ing  systems  and  middleware  is  an  old 
story:  Linux  and  tools  such  as  Apache 
have  long  since  moved  from  the  fringes 
to  mainstream  adoption.  But  now, 
open-source  enterprise  applications, 


including  CRM,  are  beginning  to  show 
up  on  IT’s  radar  screen,  says  Gartner 
analyst  Laurie  Wurster.  According  to 
a  recent  survey  by  CIO,  45  percent  of 
the  328  IT  leaders  queried  use  desktop 
applications  such  as  OpenOffice.org 
and  29  percent  use  open-source  enter¬ 
prise  applications.  The  most  popular  of 
those  enterprise  applications  are  col¬ 
laboration  tools,  CRM  tools  and  ERP 
applications,  according  to  the  survey. 
(For  more  survey  results,  see  “Opening 
Up  to  Open  Source,”  Page  46.) 

To  be  sure,  this  is  a  nascent  trend. 
Open-source  CRM  barely  registers 
when  industry  watchers  like  Gartner 
compile  market-share  charts.  “We 
have  to  look  at  open-source  CRM  the 
way  we  looked  at  Linux  five  years  ago,” 
says  Wurster. 

And  like  the  early  adopters  of  Linux, 
the  pioneers  of  open-source  enterprise 
applications  aren’t  yet  a  representative 
cross  section  of  business.  They  tend  to 
be  midsize  companies,  often  engaged 
in  business-to-business  commerce  and 
equipped  with  good  in-house  develop¬ 
ment  skills. 

Enterprise  adoption  is  not  unknown; 
H&R  Block,  for  example,  is  a  SugarCRM 


customer.  But  that’s  something  of  an 
exception  to  the  rule,  in  part  because 
most  big  businesses  already  have  a 
sizable  commitment  to  an  existing 
commercial  CRM  package.  Also,  trans¬ 
action-heavy,  consumer-oriented  busi¬ 
nesses  and  other  large  enterprises  may 
need  more  features  than  those  offered 
by  the  open-source  competition. 

If  your  company  does  fit  the  profile, 
there’s  quite  a  bit  to  be  gained.  Open- 


source  CRM  packages  (including  sup¬ 
port  and  charges  for  premium  editions) 
cost  approximately  20  percent  as  much 
as  corresponding  commercial  solu¬ 
tions,  says  Wurster. 

Since  most  of  the  code  is  open,  the 
applications  tend  to  be  very  customiz¬ 
able,  run  on  any  platform,  and  have  a 
good,  if  not  all-encompassing,  feature 
set.  Indeed,  SugarCRM,  the  largest 
player  in  the  category  (Concursive  is 
number  two),  has  added  more  mobile 
features  than  many  of  its  commercial 
rivals. 

A  Big  Trust  Question 

No  CIO  minds  saving  money,  but  some 
worry  that  open-source  software  is,  well, 
too  cheap.  That  was  part  of  the  prob¬ 
lem  faced  by  IMA  Financial’s  Hallam 
when  she  tried  to  get  the  OK  to  deploy 
Concursive.  “We  view  our  software 
vendors  as  long-term  partners.  There 
was  concern  that  they  might  disappear 
at  some  point,”  Hallam  says.  Ultimately, 
though,  management  was  won  over  by 
the  understanding  that  even  if  Concur¬ 
sive  should  fail,  the  open-source  code 
would  still  be  IMA’s  and  the  open- 
source  community  would  continue  to 


offer  a  measure  of  support. 

Despite  its  roots,  open  source  has 
moved  well  beyond  the  stage  where  it 
represented  a  cultural  revolt  against 
the  software  establishment.  Today, 
many  open-source  companies  keep  a 
sharp  eye  on  the  bottom  line  by  selling 
services  as  well  as  enhanced  versions 
of  their  free-for-the-downloading  com¬ 
munity  editions. 

Still,  there’s  no  getting  around  it.  The 
economics  of  open  source  are  different. 
“Any  CIO  who  considers  open  source 
to  solve  a  critical  business  need  will 
look  at  its  commercial  viability,”  says 
Ron  Bongo,  CEO  of  Corra  Technology,  a 
systems  integrator  specializing  in  open 
source.  That’s  not  always  easy  since  the 
providers  of  open-source  CRM  are  pri¬ 
vately  held. 

But  even  the  larger  open-source  CRM 
companies  are  hungry  for  paying  busi¬ 
ness,  which  means  that  a  CIO  consider¬ 
ing  a  major  deployment  has  a  good  deal 
of  leverage.  “SugarCRM  had  a  passion 
to  land  us  as  a  customer,”  says  Evans 
Wroten,  CIO  of  Inter  Act  Public  Safety 
Systems  in  Winston-Salem,  N.C.  Wro¬ 
ten  had  led  deployment  of  Salesforce 
.com  and  Siebel  CRM  on  other  jobs,  but 
having  seen  the  success  of  open-source 
infrastructure  projects,  Wroten  was 
ready  to  listen  to  Sugar’s  pitch  when 
the  new  management  took  the  helm 
at  InterAct  following  the  acquisition 
in  2005. 

From  an  IT  perspective,  the  company 
had  been  flying  by  the  seat  of  its  pants. 
InterAct  lacked  a  central  repository  for 
customer  information.  Each  sales  rep 
had  a  separate  stash  of  contact  files  and 
a  spreadsheet  of  likely  sales.  “All  of  that 
information  was  stuck  in  silos,”  says 
Wroten.  Disorganized  sales  contacts 
are  bad  enough.  But  the  new  managers 
found  that  making  an  accurate  finan¬ 
cial  forecast  was  very  tough.  “They  (the 
salespeople)  would  walk  into  meetings 
with  estimates  on  a  yellow  legal  pad,” 
he  says. 


Like  the  early  adopters  of  Linux,  the 
pioneers  of  open-source  enterprise 
applications  aren’t  yet  a  representative 
cross  section  of  business. 


22  AUGUST  1,  2008  |  www.cio.com 


: 


ALLMFPs  SORT  PAGES. 

THIS  ONE  SORTS  YOUR  OFFICE. 


hp.com/go/6040 


The  HP  Color  LaserJet  CM6040  MFP  can  help  you  take 
control  of  printing  and  copying.  With  tools  like  Web 
min,  IT  can  be  more  productive.  It  also  limits  help 
desk  calls  with  automatic  toner  and  maintenance  alerts. 
It's  part  of  a  new  breed  of  workflow-enhancing  MFPs 
from  HP.  That's  alternative  thinking  about  printing. 
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A  few  items  on  Wroten’s  checklist 
stood  out  as  Inter  Act  picked  a  new  CRM 
vendor.  First,  of  course,  the  application 
had  to  have  the  requisite  features  and 
had  to  fit  into  the  existing  infrastructure. 
“Since  we  had  systems  in  place,  we  liked 
Sugar’s  open  platform  and  its  ability  to 
write  to  other  systems,”  says  Wroten. 

In  particular,  the  CIO  needed  to 
integrate  the  new  CRM  system  with 
an  existing  customer  support  intra¬ 


in  PHP,  and  for  a  lot  of  Java  shops,  that 
would  be  a  nonstarter,”  he  says.  Con- 
cursive,  on  the  other  hand,  is  Java-based, 
so  for  some  organizations  it  would  be 
the  better  choice,  Bongo  adds. 

If  you  can  handle  it,  though,  the 
flexibility  of  open-source  CRM  is  very 
powerful.  At  NetroMedia,  a  provider  of 
streaming  media  services  based  in  Vic¬ 
toria,  British  Columbia,  the  in-house 
IT  staff  transformed  SplendidCRM’s 


“No  matter  what  happens,  I  control 
my  own  data.  [SugarCRM]  could 
disappear  ana  my  data  remains 

in  MySQL.”  -Kurt  Miller,  President,  Axel  Products 


net  written  in  ColdFusion.  Wroten 
could  do  it  with  SugarCRM,  without 
resorting  to  the  expensive  systems  con¬ 
sultants  often  needed  for  commercial 
CRM  deployments. 

InterAct’s  execs  decided  they  liked 
the  flexibility  and  openness  of  open- 
source  applications;  other  companies 
might  not.  “Think  about  the  cost  of 
building  and  maintaining  your  own 
features,”  suggests  Sheryl  Kingstone, 
director  of  enterprise  research  with  the 
Yankee  Group.  “You  have  to  understand 
what  you  are  getting  into.” 

Control  over  Code  a  Plus 

Unlike  commercial  software,  open- 
source  code  is  just  that— open.  Users 
are  free  to  modify  and  distribute  most 
of  it  under  any  of  the  several  com¬ 
monly  used  open-source  licenses.  In 
fact,  openness  and  the  right  to  modify 
the  source  code  is  a  key  advantage  for 
tech-savvy  companies  willing  to  take 
on  development  tasks.  But  it  could  be  a 
burden  for  small  businesses  with  mea¬ 
ger  IT  resources. 

Development  languages,  for  exam¬ 
ple,  become  a  key  issue,  says  Bongo,  the 
systems  integrator.  “Sugar  is  written 


package  into  “a  control  panel  for  our 
entire  business,”  says  Matthew  Car- 
son,  the  Canadian  company’s  founder 
and  CTO. 

NetroMedia,  with  nearly  SCO  cus¬ 
tomers  in  77  countries,  had  been 
using  Salesforce  for  several  years  but 
had  problems  integrating  new  features 
the  company  needed.  Carson  looked  at 
SAP,  Microsoft,  Accpac  and  others  as 
well,  and  found  them  too  closed  for  his 
taste.  “Control  is  a  big  issue.  You  want 
to  be  able  to  write  the  (CRM)  system 
around  your  business  model,  not  the 
other  way  around,”  he  says. 

Carson  notes  that  his  experience 
with  SAP  was  several  years  ago,  and 
it  may  have  evolved  the  platform  to 
the  point  that  his  earlier  concerns  no 
longer  apply.  However,  he  remains  a 
SplendidCRM  customer  and  expresses 
satisfaction  with  the  deployment. 

Control,  in  a  slightly  different  sense, 


How  Your  Peers  Use  Open  Source 


See  the  full  results  of  CIO's  recent 
research,  OPEN  SOURCE  ENTERS  THE 
MAINSTREAM,  at  www.cio.com/article/ 
375916. 
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was  a  key  issue  for  Axel  Products,  a  test¬ 
ing  lab  in  Ann  Arbor,  Mich.  As  the  busi¬ 
ness  added  customers,  it  was  clearly 
outgrowing  packages  like  Outlook 
and  ACT,  and  was  looking  for  a  CRM 
application  that  would  fit  a  six-person 
business.  As  he  experimented  with 
different  software,  company  president 
Kurt  Miller  made  an  unsettling  discov¬ 
ery:  “I  couldn’t  get  our  data,  and  that’s 
hundreds  of  customers  out  of  ACT.” 

Eventually  he  did,  but  the  lesson 
stuck.  Miller  settled  on  SugarCRM 
largely  because  it’s  built  on  top  of 
MySQL,  an  open-source  database.  “No 
matter  what  happens,  I  control  my  own 
data.  Sugar  could  disappear,  and  my 
data  remains  in  MySQL,”  he  says. 

No  one  would  call  either  Sugar  or 
Concursive  a  giant,  but  both  have  siz¬ 
able  user  bases  and  are  known  to  the 
IT  analyst  community.  Concursive  has 
extended  its  functionality  into  team 
collaboration;  in  fact,  the  shift  from  its 
former  name  of  Centric  CRM  was  made 
to  reflect  the  company’s  broader  scope. 
Splendid  has  its  partisans  but  is  admit¬ 
tedly  quite  small  and  appeals  to  smaller 
businesses.  There  are  scores  of  small 
open-source  CRM  providers  listed  on 
SourceForge.net. 

Is  open-source  CRM  right  for  you? 
There’s  no  one  answer.  Those  apps  save 
money,  are  flexible  and  give  you  lots  of 
control  over  your  data  and  infrastruc¬ 
ture.  If  your  company  has  had  good 
experiences  with  Linux  or  an  open- 
source  database  like  MySQL,  you’ll  be 
in  a  stronger  position  to  recommend 
open-source  CRM  to  your  manage¬ 
ment  team.  If  you’re  not  ready  to  take 
the  plunge,  a  pilot  deployment  might 
answer  your  questions  without  much 
strain  on  the  budget.  Or,  give  it  another 
few  years.  Linux  grew  up;  so  will  open- 
source  enterprise  applications.  BQ 


Bill  Snyder  is  a  California-based  freelance 
writer.  To  comment  on  this  article,  go  to 
www.cio.com/article/418113. 
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Strategies  for 
Asia-Pacific  expansion 

Trusted,  Tested  Partners  Hold  Keys  to  Success 


Today’s  business  world  is  truly  borderless.  One 

would  be  hard-pressed  to  find  a  large  U.S. -based 
company  without  some  business  operations 
overseas.  The  rewards  for  global  expansion,  particularly 
in  high-growth  regions  like  Asia-Pacific,  can  be  great.  But 
expansion  presents  unique  challenges.  Cultural,  language 
and  regulatory  barriers  are  only  the 
beginning.  Multinational  corporations 
(MNCs)  must  deal  with  network 
and  application  performance  issues, 
integrating  IT  infrastructure,  data 
security,  disaster  recovery,  reliability 
and  customer  support. 

U.S. -based  companies  expanding 
into  Asia-Pacific  therefore  need  a 
trusted,  tested  managed  services 
provider  with  deep  expertise  in  the  region  to  guide 
them  through  the  process  of  building  and  maintaining 
a  secure,  robust  global  network  and,  just  as  importantly, 
follow  it  up  with  stellar  support.  In  fact,  in  surveys  and 
interviews  with  IT  executives,  many  say  they  want  a 
managed  services  provider  to  be  both  that  and  a  business 
provider  in  equal  measure,  sharing  the  risks  and  rewards 
of  expansion  to  the  Asia-Pacific  region. 

According  to  new  research  conducted  by  IDG  Research 
Services,  87  percent  of  respondents  are  already  operating  or 
expanding  into  Asia-Pacific,  and  78  percent  have  plans  to 
do  so  over  the  next  two  years.  The  survey  polled  CIOs  and 
IT  managers  in  the  U.S.  employed  at  companies  with 
$1  billion  or  more  in  annual  revenue.  The  biggest 
expansion  driver  by  far,  cited  by  79  percent  of  respondents, 
is  an  opportunity  to  grow  sales.  Other  drivers  include 
access  to  new  distribution  channels  (45  percent),  cost 
reduction  (39  percent),  offshore  development  (29  percent) 
and  offshore  manufacturing  (23  percent). 


CIOs  face  some  common  challenges  when  supporting 
business  objectives  in  Asia-Pacific.  The  most  significant 
challenge  is  security:  Seventy-one  percent  of  respondents 
rated  it  a  four  or  five  (where  five  is  the  most  significant 
challenge  to  navigating  offshore  markets) . 

Protecting  company  data  encompasses  more  than  the 
creation  of  a  secure  network.  It’s 
also  about  protecting  intellectual 
property  with  sophisticated  tools 
that  set  parameters  to  control  the 
flow  of  data  between  employees, 
business  partners  and  customers. 
Security — in  particular  the  ability 
to  identify  and  authenticate 
those  with  network  access — is  a 
challenge  that  Aker  Philadelphia 
Shipyard,  a  commercial  shipbuilder,  is  currently  dealing 
with  as  it  expands  its  China  operations. 

“We  don’t  really  know  if  we  can  trust  everyone  that 
has  access  to  the  network,”  says  chief  technology  officer 
Michel  Boeckx.  “There  are  language  and  cultural  barriers 
that  have  to  be  understood  and  accommodated  but  also 
managed  in  a  way  that  provides  us 
with  some  security.  We’re  trying  to 
control  things  here  [in  the  U.S.]  as 
well  as  we  can  and  begin  the  process  of 
integrating  those  offshore  operations.” 

The  second  most  significant 
challenge  in  expanding  to  Asia-Pacific 
is  application  availability.  This  is 
probably  not  surprising  given  the 
high  latency  caused  by  great  distances 
between  multinational  data  hubs. 

Global  networks  need  to  be  designed 
for  optimum  performance  under  these 
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conditions.  Other  challenges  cited  by  respondents  include 
IT  regulatory  issues,  customer  support  and  reliability. 

Managed  Integration 

How  do  would-be  MNCs  successfully  expand  their 
business  operations  without  interruption  or  chaos?  The 
answer  lies  in  managed  integration  of  global  IT  resources. 
Managed  integration  refers  to  the  implemention  of  an 
optimal  IT  environment  to  support  an  organization’s 
global  operation.  Some  managed  service  providers 
envision  a  “meshed  environment”  where  standardized 
and  battle-tested  solutions  are  deployed  globally,  bringing 
the  entire  organization  together  to  function  as  a  single, 
consistent  entity. 

Indeed,  standardization  and  consolidation  of  IT  assets 
emerged  as  a  common  goal  among  technology  executives 
expanding  their  business  operations  to  Asia-Pacific. 

Tight  integration  of  IT  operations  means  that  users  can 
access  the  same  applications,  at  the  same  time,  and  at  the 
same  performance  levels,  on  a  global  scale.  It  also  means 
moving  disjointed  data  centers  to  a  handful  of  secure, 
strategically  located  hubs,  creating  a  universal  disaster 
recovery  and  security  infrastructure. 

“We’re  trying  to  consolidate  applications  into 
two  key  data  centers,  and  those  applications  are  then 
servicing  users  globally,”  says  the  global  director  of  IT 
infrastructure  at  a  large  industrial  services  company. 

The  goal,  he  says,  is  to  deliver  “the  same  level  of  service 
to  users  whether  they’re  in  Thailand  or  China  or  South 
America  or  the  United  States.” 

Who  Can  Help? 

What  characteristics  should  MNCs  consider  when  trusting 
their  most  valuable  assets  to  a  managed  service  provider? 
According  to  survey  respondents,  service  areas/coverage 
and  service  expertise  are  the  most  important.  MNCs 
need  their  provider  to  have  a  presence  everywhere  they 
want  to  be  in  Asia-Pacific.  NTT  Communications,  for 
example,  is  part  of  the  world’s  largest  telecommunications 
group,  NTT,  and  provides  global  networking,  data  center 
and  managed  security  services,  with  particular  depth 
in  Asia-Pacific.  “Our  customers  look  to  us  for  superior 
quality  and  proactive  support,  especially  in  high-growth 


countries  like  India  and  China,”  says  Stephen  Bloom, 
vice  president  of  business  development  at  NTT  America 
(the  U.S.  subsidiary  of  NTT  Communications).  “Your 
service  provider  has  to  have  the  local  knowledge  to  enable 
seamless  global  operations.” 

The  importance  of  quality  of  service  cannot  be 
understated.  NTT  Communications  transcends  standard 
service  level  agreements  by  meeting  annually  with  its  Asian 
carrier  partners  at  an  event  called  the  Arcstar  Carrier  Forum, 
to  review  quality  reports  and  put  into  action  specific  plans 
to  bridge  the  gap  between  existing  and  desired  service 
quality.  The  companies  then  evaluate  results  monthly  and 
implement  other  improvement  plans  as  needed. 

Technology  executives  also  say  that  it’s  crucial  to  set 
realistic  expectations  (and  consistently  exceed  them),  as 
is  the  service  provider’s  response  time  in  addressing  and 
fixing  problems. 

“A  managed  service  provider  should  proactively 
monitor  our  [network]  and  take  the  necessary  actions 
before  service  reaches  an  unacceptable  level  and  they  need 
to  be  able  to  react  quickly  to  any  service  disruptions,  even 
a  slowdown,”  says  John  Neal,  head  of  technology  at  Rexam 
Group,  a  U.K.-based  global  consumer  packaging  company. 

Conclusion 

The  best  choice  in  expanding  business  operations  to  Asia- 
Pacific  is  a  managed  service  provider  that  can  guarantee 
availability  of  network  services,  security  and  disaster 
recovery,  and  who  has  relationships  with  local  carriers  to 
extend  coverage.  But  even  that  is  not  enough.  When  it 
comes  to  choosing  a  partner  to  support  global  business 
operations,  every  customer  wants  to  be  treated  like  the 
most  important  customer. 

What  differentiates  service  providers,  then,  is  the 
level  of  service  (both  pre-  and  post-  sale),  quality  of 
service  and  business  value  they  bring  to  the  table  over 
the  life  of  a  contract. 
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Is  It  Time  to  Reset 
Your  IT  Strategy? 

Running  IT  as  a  business  has  its  benefits  and  its  pitfalls. 

Here’s  how  you  can  go  from  managing  IT  efficiently  to  exploiting  it  strategically. 


rallying  call  of  corporate  strategies  for  IT  in  recent  years 

has  been  to  run  the  IT  department  “like  a  business.”  When  the 
technology-centric  first  generation  of  IT  strategies  reached  a 
point  of  diminishing  returns,  this  next  stage  was  both  inevitable 
and  beneficial.  With  the  bulk  of  IT  spending  shifting  from  investment  in  new 


and  exciting  technologies  to  maintaining  and  replacing  existing  ones,  applying 


sound  business  discipline  has  kept  that  spending 
under  control  and  has  driven  a  necessary  focus  on 
operational  performance  and  efficiency. 

But  with  these  benefits  come  pitfalls.  If  you’ve 
tried  managing  an  internal  IT  department  as  a  busi¬ 
ness  you  already  know  that  you  can’t  take  that  very 
far,  for  the  obvious  reason  that  your  IT  department 
isn’t  a  business.  It  is  a  part  of  a  business:  a  signifi¬ 
cant  contributor  to  a  value  chain,  not  a  self-con¬ 
tained  value  chain  of  its  own.  And  the  harder  you 
try  to  create  a  separate  value  chain  for  IT,  the  harder 
it  becomes  to  integrate  it  with  the  business. 

Innovative  companies  have  already  moved  to  the 
next-generation  strategy.  Here,  the  CIO’s  purpose  is 
not  to  run  a  traditional  IT  department  but  to  pro¬ 
vide  corporate  leadership  to  business  functions  that 
are  investing  in  and  exploiting  IT  in  the  context  of 


their  business  strategies  and  operating  plans. 

What  to  Watch  Out  For 

The  benefits  of  running  an  IT  department  in  a 
more  efficient,  businesslike  way  are  well-known. 
The  department’s  purpose  is  clear  to  its  staff  and 
stakeholders.  Its  internal  processes  become  ever 
more  efficient,  costing  progressively  less  with  no 
loss  of  value  to  the  business  units  that  fund  them. 
Any  activity  that  contributes  to  IT’s  purpose  and 
processes— but  is  not  core  to  them— is  market- 
tested  to  find  and  exploit  the  best  sourcing  option, 
whether  in-house  or  outsourced. 

However,  alongside  these  benefits  there  are  also 
risks.  The  most  damaging  to  the  CIO’s  longer-term 
strategy  is  any  attempt  to  run  the  department  as  a 
separate  business  rather  than  just  running  it  in  a 
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If  You've  tried  managing  an  IT 
department  as  a  business  you  know 
that  you  can't  take  that  very  f  ar, 
for  the  obvious  reason:  Your  IT 
department  isn't  a  business. 


more  businesslike  way. 

There’s  a  world  of  difference  between  running  IT 
like  a  business,  and  trying  to  run  it  as  one.  It’s  amazing 
how  one  word  can  fundamentally  alter  strategy.  Run¬ 
ning  IT  like  a  business  means  adopting  a  businesslike 
mind-set,  processes  and  financial  disciplines.  Run¬ 
ning  it  as  a  business  means  competing  for  revenue  and 
investment  in  an  open  market,  and  going  bankrupt  if 
you  run  out  of  cash  to  cover  your  liabilities. 

What  happens  if  a  CIO  attempts  to  run  her  department  as 
a  business?  Other  departments  will  perceive  that  IT  wants 
to  be  treated  like  a  supplier.  If  the  CIO’s  chosen  business  is 
to  be  a  provider  of  operational  IT  services,  then  that  is  what 
her  “customers”  expect  her  to  concentrate  on.  In  that  case, 
contributing  to  corporate  strategies  will  be  an  uphill  battle. 

The  IT  department  might  find  another  pitfall  if  it  tries  too 
hard  to  run  itself  as  a  business.  The  company’s  business  units 
will  be  reluctant  to  fund  any  material  investment  by  IT  in 
branding,  marketing,  selling  or  upgrading  the  management 
systems  that  support  the  IT  department’s  own  productivity. 
Why  should  they?  One  of  the  cost  advantages  of  an  inter¬ 
nal  department  is  that  it  doesn’t  require  all  the  capabilities 
a  real  supplier  needs  to  compete.  So  the  CIO  is  caught.  She 
has  placed  herself  in  competition  with  external  suppliers  but 
without  access  to  the  investment  that  they  have. 

The  IT  department  will  find  itself  in  a  corner  from  which 

escape  becomes  diffi¬ 
cult.  It  lacks  the  means 
to  compete  with  real 
IT  suppliers  and  has 
separated  itself  from 
the  business.  It  wants 
to  be  taken  seriously  in 
the  world  of  strategy,  yet  its  primary  business  is  operational. 
This  is  when  taking  the  “IT  department  as  a  business”  too  far 
seriously  undermines  the  next-generation  strategy  for  IT. 

From  Efficient  to  Strategic 

The  strategic  IT  focus  is  now  on  exploiting  technology  to  cre¬ 
ate  new  business  value.  Today’s  successful  CIO  is  valued  as 
a  leader  of  a  corporate  strategy  in  which  the  company  is  an 
“expert  customer”  of  IT.  Managing  operational  delivery  of  IT 
services  in  a  businesslike  way  is  simply  expected. 

Unless  the  company  is  already  an  expert  customer  of  IT,  its 
people  will  need  strategic  leadership  from  trusted  colleagues 
who  do  not  have  a  vested  interest  in  supplying  technology 
services.  If  the  IT  department  is  behaving  as  a  business  sup¬ 
plying  operational  IT  services,  then  who  can  everyone  trust 
to  provide  the  strategic  leadership  that  the  next  generation 
of  IT  strategy  demands? 

A  CIO  who  runs  the  IT  department  as  if  it  were  a  separate 


business  will  need  to  rethink  her  operating  model.  What 
have  others  done  in  such  circumstances?  They  have  divided 
their  department’s  activities  into  two  groups:  core  capabili¬ 
ties  and  services.  Core  capabilities  are  those  IT- related  activi¬ 
ties  that  the  company  must  have  in-house  and  that  make  it 
an  expert  customer  of  technology.  Services  are  activities  that 
can  be  kept  in-house  or  outsourced.  Naturally,  the  CIO’s  own 
activities  fall  under  core  capabilities  rather  than  services. 

After  dividing  IT’s  activities  into  these  categories,  the  CIO 
can  benchmark  her  company’s  core  IT-related  capabilities 
against  the  models  of  other  innovative  companies.  In  par¬ 
ticular,  the  company  should  excel  at  true  enterprise  archi¬ 
tecture  (not  just  its  technology  components)  and  investing 
in  business  change.  Together,  these  are  the  engine  of  strate¬ 
gic  investment  and  value  creation.  The  CIO  may  find  her  IT 
department’s  strategic  influence  is  low  because  these  core 
capabilities  are  weak,  missing  or  not  integrated  enough  with 
their  equivalents  in  the  wider  company. 

Having  explored  the  company’s  strengths  and  weaknesses 
in  its  core  capabilities  as  a  customer  of  IT,  the  CIO  faces  a 
major  choice.  Does  she  develop  the  necessary  capabilities 
within  the  IT  department,  or  elsewhere  in  the  company?  If  IT 
is  perceived  as  a  supplier,  the  first  option  is  not  open.  So  the 
CIO  is  faced  with  developing  the  core  capabilities  outside  of 
IT.  To  do  so,  she  may  need  to  give  up  day-to-day  control  of  IT 
service  delivery  and  concentrate  on  corporate  strategy. 

Some  CIOs  have  established  a  corporate-level  team  that 
develops  and  leads  the  company’s  strategy  and  capabilities 
as  an  expert  customer  of  IT,  with  no  accountability  for  day- 
to-day  delivery  of  IT  services.  Instead,  accountability  for 
IT  operations  is  in  the  hands  of  a  CTO  or  equivalent,  who 
reports  to  an  operations  executive  such  as  the  COO. 

This  model,  which  separates  the  corporate  strategy  for  IT 
from  operational  service  delivery,  may  not  suit  everyone.  But 
as  we  explore  the  options  for  maximizing  IT’s  strategic  con¬ 
tribution,  it’s  essential  to  know  it  exists.  QQ 


Chris  Potts  advises  companies  on  corporate  and 
IT  strategy  as  a  director  with  the  IT  consultancy 
Dominic  Barrow.  He  is  also  the  author  of  Frul- 
Tion:  Creating  the  Ultimate  Corporate  Strategy 
for  Information  Technology.  To  comment  on  this 
article,  go  to  www.cio.com/article/335813. 
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IT  Budget 


Five  ways  to  save  money  fast 

BY  KIM  S.  NASH 


YOU  KNOW  HOW  UGLY  IT  IS  OUT  THERE. 
The  cost  of  products  we  buy  every  day  is  jumping. 
The  Consumer  Price  Index  is  riding  more  than  4 
percent  higher  than  a  year  ago,  oil  is  trading  at  all- 
time  highs,  and  in  June,  the  Dow  Jones  industrial 
average  limped  through  its  worst  month  since  the 
Great  Depression. 

CEOs  expect  the  economy  to  grow  at  a  skimpy 
1.3  percent  this  year,  finds  a  survey  of  110  chief 
executives  conducted  in  May  and  June  by  the 
Business  Roundtable.  That’s  the  slowest  growth 
rate  predicted  by  CEOs  since  2002— post-9/11 
and  post-bubble.  The  national  unemployment 
rate  climbed  to  5.5  percent  recently,  up  1  percent 
from  this  time  last  year  and  up  half  a  percent  since 
January,  says  the  Bureau  of  Labor  Statistics. 

Perhaps  most  ominous:  Of  those  gloomy  CEOs, 
31  percent  expect  unemployment  to 
increase  in  the  next  six  months,  up 
from  22  percent  who  thought  so  at  the 
beginning  of  the  year.  When  the  boss 
thinks  fewer  people  will  be  working, 
fewer  people  will  be  working. 

You,  though,  are  smart.  You  are 


looking  for  ways  to  cut  costs— and  quickly.  Ide¬ 
ally,  you’ve  already  identified  ways  to  make  cuts 
and  get  more  value  from  what  you  do  spend  by 
managing  IT  investments  closely.  Patrick  Kys, 
VP  of  IT  and  CIO  at  Lafarge  North  America, 
says  his  “seven-figure”  savings  from  renegotiat¬ 
ing  contracts  with  AT&T  and  Hewlett-Packard 
(detailed  on  Page  37)  emerged  from  a  bigger  plan 
to  rein  in  IT  projects  worldwide.  And  Lafarge 
North  America  isn’t  going  after  price  breaks 
alone.  Increases  in  service  levels  are  also  valu¬ 
able,  he  says.  Many  cost-cutting  maneuvers  pro¬ 
vide  additional  benefits. 

The  U.S.  Department  of  Defense  (DoD),  for 
example,  installed  a  bit  of  code  on  its  servers  to 
reveal  all  the  devices  and  software  hooked  up  to 
them  (and,  as  a  side  benefit,  found  software  that 
didn’t  comply  with  its  security  poli¬ 
cies).  Knowing  exactly  what  assets 
you  have  is  the  first  step  to  figuring 
out  which  underused,  overpriced 
ones  to  ditch. 

“Companies  have  to  do  something 
now,”  agrees  Erik  Dorr,  senior  IT 
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research  director  at  the  Hacked  Group,  a 
technology  management  consulting  firm. 
But  “it’s  better  to  think  it  through  than 
make  cuts  in  a  reactionary  way.” 

We  scouted  for  examples  of  tactical 
projects  that  you  can  execute  within  a 
few  months  and  reap  the  rewards  in  a 
year  or  less.  Read  our  profiles  of  projects 
from  Title  Resource  Group,  Washington 
Mutual,  the  DoD,  Lafarge  North  America 
and  Gap  Inc.  Direct  for  lessons  you  can 
take  to  the  bank. 


1  Consolidate  Cell 
Phone  Services 

s  a v  I N  G  s :  30  percent  of 
monthly  charges 

Title  Resource  Group 
Mount  Laurel,  N.Ji 

TIME  LITERALLY  IS  money  when 
you’re  talking  about  cell  phone  minutes. 
Title  Resource  Group  recently  decided 
to  tackle  its  growing  monthly  bills  from 
employee  cell  phones,  pagers,  BlackBer- 
rys  and  other  personal  devices. 

The  private  company,  which  handles 
real  estate  closings,  is  a  subsidiary  of  Real- 
ogy,  the  $300  million  real  estate  firm  that 
owns  Century  21,  Coldwell  Banker  and 
other  franchises.  That’s  not  an  easy  busi¬ 
ness  to  be  in  right  now.  The  company  as 
a  whole  is  spending  on  some  technology, 
such  as  software  as  a  service,  to  position 
itself  to  trim  future  IT  costs,  says  Craig 
Cuyar,  CIO  of  the  Realogy  Finance  Group. 
Training  applications,  for  example,  are 
being  moved  to  SaaS  to  save  money  on 
hardware,  software  and  some  of  the 
implementation,  Cuyar  says,  with  terms 
negotiated  frequently— every  12  months. 

But  meanwhile,  who  can  say  no  to  tacti¬ 
cal  cost  cutting? 

This  time  last  year,  Title  Resource 
employees  could  use  any  cell  phone  they 
wanted  for  work,  even  personal  devices 
that  they,  not  the  company,  owned.  Cor¬ 
porate  calling  plans  for  managers,  sales 
reps  and  other  employees  allowed  for  a 
few  hundred  minutes  per  month.  Some 
employees  used  a  personal  plan,  even  on  a 


company-owned  device.  Other  employees 
submitted  cell  phone  charges  on  monthly 
expense  reports,  says  Nehal  Trivedi,  CIO 
at  Title  Resource. 

Given  the  situation,  the  company 
didn’t  know  exactly  how  much  money 
it  was  spending  on  cell  phone  bills.  But 
Trivedi  had  the  feeling  it  was  too  much. 
“A  thousand  dollars  a  month  raises  a  lot  of 
eyebrows,”  he  says.  “If  it  was  your  home 
bill,  you  would  look  into  it  no  matter  how 
affluent  you  are.” 

Trivedi  needed  data  to  make  a  business 
case  for  reining  in  cell  phone  expenses. 
So  business  intelligence  specialists  in  IT 
worked  with  corporate  finance  to  collect 
the  data.  (Concerned  about  privacy,  the 
IT  staff  couldn’t  sift  through  people’s 
expense  reports  where  employees  most 
often  claimed  cell  phone  fees,  says  David 
Massiliano,  manager  of  telecommunica¬ 
tions  at  Title  Resource.) 

Armed  with  those  specifics,  Title 
Resource  then  negotiated  contracts  with 


two  preferred  cell  providers,  AT&T  and 
Verizon,  that  give  the  company  better  rates 
and  national  shared  minutes.  If  one  per¬ 
son  exceeds  the  monthly  allotment,  he  can 
take  minutes  from  someone  who  didn’t 
use  as  many  and  not  pay  for  extra  usage. 
Title  Resource  categorized  employees  as 
minimal  use,  voice-only  use  and  voice- 
and-data  use,  Trivedi  says.  Employees 
allowed  minimal  use  are  capped  at  $40 
per  month  in  usage.  Voice-only  people 
get  plain  cell  phones,  not  smartphones. 
Those  allowed  voice-and-data  plans  can 
get  BlackBerrys  or  other  smartphones, 
he  says. 

Title  Resource  enforces  the  limits 
by  sending  spending  reports  to  senior 
managers  every  month,  detailing  whose 
monthly  bills  were  highest.  “We  started 
paying  attention  to  the  top  talkers,  and 
[their  bills]  are  difficult  to  justify,”  Trivedi 
says. 

The  project  took  a  few  months,  and  the 
company  saw  savings  with  the  first  phone 
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Nehal  Trivedi,  CIO  with  Title  Resource 
Group,  established  a  corporatewide 
cell  phone  policy  that  put  limits 
on  employees’  mobile  charges. 

bills,  Trivedi  says.  He  declines  to  specify 
how  much  he’s  saved,  but  he  says  compa¬ 
nies  can  knock  30  percent  to  35  percent 
off  their  monthly  cell  bills  this  way.  The 
Hackett  Group’s  Dorr  says  savings  from  a 
project  like  this  depend  on  the  level  of  con¬ 
trol  the  company  exerted  on  cell  phone 
usage  at  the  start.  “If  the  starting  point  is 
entirely  unmanaged  and  the  new  state  is 
tightly  controlled,”  he  says,  “then  30  per¬ 
cent  to  40  percent  is  entirely  reasonable.” 

Of  course,  there  was  pushback.  If 
there’s  one  thing  people  grow  attached  to, 
it’s  their  phone,  smartphone,  handheld 
device,  PDA— cool  devices  define  the  cor¬ 
porate  self  the  way  a  fancy  car  might. 

Trivedi  knew  that.  He  had  to  tell 


Where  to  Look  for  Cuts 

Erik  Dorr,  senior  IT  research  director  with  the  Hackett 
Group,  offers  three  tactical  approaches  to  cost  cutting: 

1.  Find  the  easy  pickings.  Overspending  is  easily  hidden  in  the  cost  of 
maintaining  extra  printers,  upgrading  laptops  and  paying  for  extra  cell 
phone  minutes.  Once  examined,  these  areas  can  also  yield  quick  savings. 
“We’ve  seen  companies  that  found  people  spending  $3,000  a  month  on  cell 
phones  and  wireless  charges  on  the  road,”  Dorr  says.  Title  Resource  Group 
clamped  down  on  phone  and  PDA  usage  and  now  shames  the  company's 
20  "top  talkers”  by  reporting  to  senior  managers  those  employees  who  had 
the  highest  cell  phone  charges  each  month. 


2.  Raise  the  bar  on  ROI.  If,  in  good  times,  projects  got  funded  when  they 
could  bring  returns  of,  say,  50  percent  of  costs  within  18  months,  make  it 
60  percent  of  costs  within  12.  Freeze  or  kill  existing  discretionary  projects 
that  don’t  meet  the  new  standard,  and  you’ll  have  eliminated  spending  on 
your  least-valuable  investments. 

3.  Cut  staff.  No  one  likes  to  talk  about  it,  or  do  it,  but  if  low-priority  projects 
get  cut  or  fewer-than-expected  new  projects  meet  revised  ROI  thresholds, 
some  IT  staff  may  not  be  needed.  Don't  be  entirely  opportunistic  when 
designating  who  should  go,  however;  you  don't  want  to  lose  any  gems. 

Hold  on  to  talent  with  high  potential,  even  if  those  employees  aren’t  cur¬ 
rently  assigned  much  work.  Also,  he  says,  keep  people  with  unique  skills 
and  systems  knowledge.  “We  have  seen  many  companies  laying  off  people 
only  to  hire  back  some  unique  skills  as  contractors  at  a  higher  cost ."-K.S.N. 


people  that  yes,  they  must  give  up  own¬ 
ership  of  their  main  work  device.  But 
after  he  showed  them  examples  of  how 
much  they’d  be  saving  the  company,  most 
bought  in,  he  says. 

If  employees  wanted  to  keep  a  second 
device,  they  could  choose  to  do  so  at  their 
own  expense.  And  they  did  get  to  keep 
their  old  phone  numbers. 

Finally,  the  top-talker  report  loomed, 
he  says.  “No  one  wants  their  name  on 
there.” 

One  nice  byproduct  of  Title  Resource 
owning  its  employees’  main  work  phones: 
Title  Resource  controls  the  data  on  the 
device.  Company  e-mail  can  be  received 
only  on  company-provided  devices,  not 
personal  ones,  Trivedi  says.  When  an 
employee  leaves,  the  device  is  recalled  and 
the  company  holds  on  to  the  data  therein, 
such  as  sales  contacts  and  memos.  Before, 
employees  could  and  did  walk  away  with 
potentially  valuable  information,  Trivedi 
says.  “If  your  company  name  is  not  on  this 
person’s  account,  you  can’t  easily  recover 
that  data.” 


2  TurnOff 
Idle  PCs 

Savings:  $3 million 
Washington  Mutual 
Seattle 

WHEN  THE  CIO  also  leads  the  com¬ 
pany’s  environmental  efforts,  the  IT 
group,  for  better  or  worse,  gets  to  be 
front  and  center  in  the  green  movement. 
And— it’s  been  said  before— going  green 
can  save  greenbacks,  a  priority  for  the 
bank,  which  suffered  heavy  losses  in  the 
subprime  mortgage  crash.  Washington 
Mutual  (WaMu)  laid  off 1,200  employees 
and  took  the  chairman  title  away  from 
CEO  Kerry  Killinger  in  June.  Wall  Street 
doesn’t  expect  the  company  to  post  profits 
again  until  2010. 

Debora  Horvath,  who  has  been  CIO  of 
WaMu  since  2004,  took  on  the  chairman¬ 
ship  of  the  bank’s  newly  created  environ¬ 
mental  council  in  2007.  Green  projects 
began  before  WaMu’s  current  financial 
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-v.  to  stir  or  stimulate  to  action; 
to  free  colleagues  from  the  status  quo. 

Now  more  than  ever,  CIOs  are  driving  change  -  change  that 
encompasses  innovation,  global  integration,  evolving  business 
models  and  corporate  social  responsibility.  CEOs  are  turning  to 
them  to  be  the  catalysts  for  safe  and  smooth  change  management. 
The  2008  Global  CEO  Study:  Implications  for  the  CIO  draws 
on  five  key  insights  from  1,130  CEOs  and  business  leaders*  about 
new  ways  to  bring  business  and  IT  together.  Insights  that  let  you 
put  opportunities  into  action. 
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trademarks  of  International  Business  Machines  Corporation  in  the  United  States  and/or  other  countries.  Other  company,  product  and  service  names  may  be  trademarks  or  service  marks 
of  others.  ©  Copyright  IBM  Corporation  2008.  All  rights  reserved; 


At  Washington  Mutual,  CIO  Debora 
Horvath  deployed  power  management 
software  to  cut  electricity  use, 
saving  an  estimated  $3  million. 

go  into  standby  mode  after  30  minutes  of 
inactivity.  At  6  p.m.  every  night,  if  there 
is  no  activity,  PCs  go  into  standby  and 
the  monitors  turn  off.  An  employee  who 
is  working  after  hours  can  delay  the  soft¬ 
ware  from  powering  down. 

(To  read  more  about  WaMu's  envi¬ 
ronmental  initiatives,  go  to  www.cio.com/ 
article/364213.) 


3  Nix  Software 
(and  Gear) 

You  Don’t  Need 

Savings:  Millions,  potentially 

U.S.  Department  of  Defense 
Various  locations  worldwide 

TAKE  AN  ORGANIZATION  that 
budgets  $20  billion  for  information  tech¬ 
nology  in  a  given  year  and  you  can  imag¬ 
ine  that  no  one  person  (or  spreadsheet  or 
database)  keeps  a  running  and  accurate 
count  of  all  the  pieces  of  hardware  and 
software  in  action. 

So  you  might  cut  some  slack  to  the 
DoD.  But  the  DoD  itself  doesn’t  want  to 
anymore. 

An  asset  management  program  under 
way  has  so  far  produced  multimillion- 
dollar  savings  for  the  U.S.  Army,  and  the 
DoD  wants  to  replicate  it,  says  Joe  Paiva,  a 
leader  within  the  DoD  responsible  for  IT 
portfolio  management  strategy  and  policy 
development.  He  was  recently  promoted 
from  a  similar  job  with  the  Army. 

Asset  management  can  be  boiled 
down  to  four  questions,  Paiva  says.  What 
technology  do  you  have?  How  much  of 
it  do  you  own  outright?  Are  the  contract 
terms  beneficial?  Does  it  make  sense 
to  keep  each  piece  of  technology 
running? 

To  answer  the  first  question,  Paiva 
worked  with  asset  management  software 
from  BDNA,  a  private  company  in  Moun¬ 
tain  View,  Calif.  In  one  day,  he  and  his 


Verdiem.  (WaMu’s  policy  is  not  to  name 
its  technology  providers.  Verdiem  CEO 
Kevin  Klustner  spoke  at  a  CIO  magazine 
event  in  April  about  the  use  of  his  com¬ 
pany’s  product  by  “a  financial  services 
company  in  Seattle”  with  a  female  CIO. 
Marketing  materials  published  by  Ver¬ 
diem,  archived  on  the  Internet  but  no 
longer  available  at  the  vendor’s  website, 
name  WaMu  as  a  customer.) 

Horvath’s  team  set  up  the  system  so 
that  during  business  hours  of  8  a.m.  to 
6  p.m.,  PCs  and  monitors  in  WaMu’s 
retail  branches  remain  on.  At  WaMu’s 
back-office  locations,  monitors  turn  off 
after  20  minutes  of  inactivity  and  PCs 


problems  loomed;  still,  the  bank  has  cut 
its  PC-related  greenhouse  gas  emissions 
by  65  percent  and  is  on  track  to  save  $3 
million  on  electricity  costs  this  year,  Hor¬ 
vath  says. 

The  savings  will  come  from  Verdiem 
power-management  software,  which  the 
bank  installed  on  its  44,000  PCs  last  year, 
after  a  100-PC  pilot  last  spring.  The  soft¬ 
ware  monitors  activity  on  the  computers, 
powering  them  down  when  they  aren’t 
in  use.  Less  electricity  used,  more  money 
saved.  Laptops  were  removed  from  the 
rollout  because  ROI  wasn’t  as  great  as  on 
desktops,  a  spokesman  says.  That  assess¬ 
ment  was  based  on  a  study  performed  by 
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team  installed  the  BDNA  Insight  “agent¬ 
less  discovery”  product  on  servers  in  one 
Army  office,  to  search  various  servers  and 
PCs  at  major  Army  bases  and  facilities. 

“Agentless  discovery”  means  the 
software  automatically  crawls  an  IP  net¬ 
work  to  record  every  device  and  piece 
of  software  attached  to  it.  Initial  scans 
take  about  a  day,  Paiva  estimates.  BDNA 
Insight  then  spits  out  a  report  that  can  be 
sorted  by  type  of  device,  server  crawled 
and  other  variables.  On  the  project  with 
Paiva  were  Kevin  Wright,  a  lead  engi¬ 
neer,  and  Dick  Meade,  a  contract  project 
manager. 

The  process  turned  up  some  sur¬ 
prises  and  has  helped  the  Army  close 
money  leaks.  For  example,  across  Army 
facilities,  individual  Oracle  database  and 
applications  licenses  were  in  use,  sold 
to  local  military  purchasing  agents  by 
value-added  resellers.  By  moving  those 
to  an  enterprise  license  and  mainte¬ 
nance  contract  with  Oracle  directly,  the 
Army  saved  “tens  of  millions”  of  dollars, 
Paiva  estimates. 

On  the  hardware  side,  the  Army  found 
some  printers  that  were  underused  and 
others  that  were  overused.  “A  big  printer 
that  should  be  doing  thousands  of  pages 
a  month  was  doing  only  100,”  he  says. 


Paiva  was  promoted  before  the  Army 
tackled  printer  reconciliation,  but  with  a 
good  asset  discovery  tool,  he  says,  “you 
can  very  quickly  see  this  doesn’t  make 
any  sense.” 

As  an  ancillary  benefit,  the  asset  man¬ 
agement  program  has  helped  the  Army 
improve  security.  For  example,  the  team 
found  versions  of  the  FoxPro  database, 
now  owned  by  Microsoft,  that  the  military 
stopped  using  years  ago.  “We  found  older 
versions  of  the  database,”  he  says,  “that 
potentially  had  vulnerabilities,”  such 
as  letting  data  pass  unencrypted  over 


a  network. 

Another  example:  at  Fort  Belvoir,  an 
Army  base  in  Virginia,  the  software  imme¬ 
diately  found  103  copies  of  Google  Earth, 
according  to  a  presentation  Paiva  made 
last  August  to  the  Armed  Forces  Commu¬ 
nications  and  Electronics  Association,  a 
nonprofit  group  studying  military  and 
homeland  security  IT.  While  individuals 
can  use  Google  Earth  without  a  license, 
large  organizations  aren’t  allowed  to. 
The  software  also  turned  up  54  possibly 
unsanctioned  copies  of  iTunes  and  sev¬ 
eral  instances  of  Google  Talk,  which  could 
allow  unauthorized  VoIP  and  instant  mes¬ 
saging.  “At  installations  where  we  thought 
we  had  all  of  the  computers  tightly  locked 
down,  it  showed  we  had  software  which 
had  been  installed  without  going  through 
our  software  approval  and  installation 
process,”  he  explains.  “This  is  not  just  an 
Army  thing.  Compliance  is  always  a  chal¬ 
lenge  in  any  big  organization.” 

Jack  Heine,  an  analyst  at  Gartner,  esti¬ 
mates  that  for  organizations  with  no  or 
very  immature  technology  asset  manage¬ 
ment  programs,  first-year  savings  could 
amount  to  20  percent  of  the  IT  budget. 
Then  5  percent  per  year  is  possible  for 
the  next  three  years.  Paiva,  meanwhile, 
says  any  large  company  can  get  the  same 


benefits  as  the  Army  and  the  DoD.  After 
serving  for  10  years  in  the  Army,  he  was 
an  IT  manager  at  a  hospitality  company 
and  at  a  healthcare  company.  When  the 
Iraq  war  started  in  2002,  he  took  a  civil¬ 
ian  IT  management  job  with  the  Army.  In 
a  typical  enterprise,  he  says,  a  handful  of 
vendors  account  for  most  of  the  money 
spent  on  hardware  and  software. 

“Once  you  identify  that,  you  can  start 
talking  about  enterprise  contracts,”  he 
says.  Savings  of  “a  couple  percentage 
points  of  a  really  massive  number  is  still 
a  really  massive  number.” 


4  Get  Help 

With  Contract 
Negotiations 

S  AV I N  G  s :  More  than  $1  million 

Lafarge  North  America 
Hern  don,  Va. 

LAFARGE  NORTH  AMERICA  is 

a  private  company,  owned  by  Lafarge 
Group  in  France,  that  makes  concrete, 
gypsum  and  other  construction  materi¬ 
als.  With  $6  billion  in  sales,  the  Herndon, 
Va. -based  company  isn’t  small  potatoes. 

Even  so,  VP  of  IT  and  CIO  Patrick  Kys 
thought  he  wasn’t  getting  the  respect— 
that  is,  the  pricing  leverage— he  should  get 
from  the  company’s  major  vendors,  such 
as  AT&T,  HP  and  Microsoft. 

But  Lafarge  didn’t  know  what  level 
of  discounting  it  could  get  and  therefore 
wasn’t  sure  if  they  were  as  bold  in  negoti¬ 
ating  as  it  could  have  been,  Kys  says.  It’s 
hard  for  individual  CIOs  to  get  reliable 
information  about  what  other  CIOs  are 
paying,  he  says,  even  from  each  other. 
Vendor  contracts  often  stipulate  that  cus¬ 
tomers  can’t  discuss  pricing. 

To  gain  perspective,  Lafarge  North 
America  last  year  hired  NPI  Financial, 
a  spend  management  consulting  firm 
in  Atlanta.  Within  several  weeks,  NPI 
completed  its  review  of  the  first  contract, 
with  AT&T.  Lafarge  North  America  saw 
the  value  and  benefits  NPI  brought,  and 
gave  the  consultancy  other  contracts  to 
review  over  the  next  year.  Lafarge  North 
America  was  overpaying  several  vendors. 
Right  away,  the  company  set  to  work  to  get 
better  deals. 

NPI  advises  many  clients,  negoti¬ 
ates  for  some  and  keeps  benchmarks  on 
vendor  pricing  across  industries.  The 
company  keeps  individual  client  data 
confidential.  Kys  says  he  got  the  inside 
knowledge  he  couldn’t  get  elsewhere. 

NPI  representatives  helped  Lafarge 
North  America  negotiate  with  AT&T 
getting  it  to  “do  better”  on  pricing,  says 
Sepehr  Kousha,  IT  controller.  “That’s  very 
effective.” 

“We  took  their  arguments  off  the  table,” 


Across  Army  facilities,  Oracle  database  and 
applications  licenses  were  sold  to  local  pur¬ 
chasing  agents  by  resellers.  By  moving  those 
to  a  contract  with  Oracle  directly,  the  Army 
saved  tens  of  millions  of  dollars. 
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Kys  adds. 

Lafarge  North  America  is  a  big  Hewlett- 
Packard  shop,  using  HP  desktops,  laptops, 
servers,  printers,  storage-area  network¬ 
ing  products  and  various  utility  software. 
When  it  was  time  to  renew  maintenance 
and  service  agreements  with  HP,  NPI 
spent  two  weeks  assessing  Lafarge  North 
America’s  current  contracts  against  simi¬ 
lar  terms,  conditions  and  pricing  offered 
by  third-party  providers  and  against  what 
HP  was  offering  other  customers,  Kousha 
says.  “This  helped  us  to  not  only  improve 
our  current-year  prices  but  to  also  negoti¬ 
ate  a  multiyear  deal,  whereby  our  prices 
are  not  locked  for  the  next  24  months,” 
she  says.  Those  negotiations  took  about 
six  months. 

In  a  new  networking  and  data  telecom¬ 
munications  deal  with  AT&T,  Lafarge 
North  America  gained  “seven-figure  sav¬ 
ings,”  Kousha  says.  She  declined  to  pro¬ 
vide  specifics.  Kys  adds  that  savings  was 
20  percent  more  than  he  had  anticipated. 
He  credits  NPI  with  getting  that  margin. 
NPI  is  paid  on  a  retainer  basis  with  some 
incentive-based  fees  as  a  bonus.  Telecom 
negotiations  are  usually  intense,  Kousha 
adds.  “They  try  and  wear  you  down  and 
won’t  come  to  a  final  price  quickly.  They 
try  to  make  you  give  up,”  she  says.  “We 
decided  tactically  to  hang  in  there.” 

Kys  advises  other  IT  leaders  to  add 
a  controller  or  financial  manager  to  the 
technology  department.  Most  IT  manag¬ 
ers  negotiate  with  vendors  “sporadically 
[and]  don’t  have  all  the  tactics  to  win.” 
Kousha  reports  to  Kys,  with  a  dotted-line 


reporting  relationship  to  the  corporate 
finance  chief. 

Next  up  for  Kousha  and  Kys  are  con¬ 
tracts  for  storage  equipment  and  Cisco’s 
Smartnet  technical  support. 


5  Automate 

Administrative 

Tasks 

Savings:  Up  to  $  1  million 

Gap  Inc.  Direct 
San  Francisco 

COMPLIANCE.  YOU  CAN’T  avoid  it 
and  you  can’t  keep  failing  it.  The  best  you 
can  do  is  make  it  cheaper  and  easier. 

For  Gap  Inc.  Direct,  demonstrating  that 
the  company  controls  employee  access  to 
sensitive  customer  and  financial  data  is  a 
critical  part  of  passing  PCI  and  Sarbanes- 
Oxley  audits. 

Gap  Inc.’s  e-commerce  division  for  Gap, 
Gap  Inc.  Direct,  manages  the  retailer’s 
online  stores  for  Gap,  Banana  Repub¬ 
lic,  Old  Navy  and  the 
online-only  shoe  out¬ 
let,  Piperlime— runs 
mainly  Unix  servers, 
including  Linux.  But  it 
also  has  some  Micro¬ 
soft  Windows  operat¬ 
ing  systems. 

To  manage  this  mixed  environment, 
Gap  Inc.  Direct  was  using  Microsoft’s 
Active  Directory  administrative  tools. 
Among  other  features,  Active  Directory 

lets  system  admin¬ 
istrators  grant  and 
control  end-user 
permissions  more 
easily  than  many 
Unix  tools,  says 
Jeff  Arcuri,  a  senior 
manager  of  IT  at 
Gap  Inc.  Direct. 

Active  Directory 
by  itself  doesn’t 
support  Linux-  or 
Unix-based  oper¬ 
ating  systems.  Sys¬ 
tem  administrators 


ended  up  having  to  assign  employee  per¬ 
missions  individually,  to  access  different 
databases  and  applications,  depending 
on  the  work  they  needed  to  do.  When  it 
came  time  for  PCI  and  Sox  audits,  audi¬ 
tors  or  system  administrators  had  to  col¬ 
lect  the  server  logs  manually  to  show  who 
accessed  what  files  when,  for  hundreds 
of  servers.  They  could  automate  bits  of 
the  process  with  custom  scripts  but  still, 
start  to  finish,  the  ordeal  required  up  to 
10  people  working  at  least  part-time  on 
every  audit,  he  says. 

To  automate  more  of  the  process  and 
free  up  systems  administrators  for  more 
valuable  work,  Arcuri  deployed  an  iden¬ 
tity  management  tool  from  Likewise  Soft¬ 
ware.  The  software  installation  took  about 
three  months  early  this  year  and  involved 
two  to  five  system  administrators  at  vari¬ 
ous  points,  Arcuri  says.  Using  Likewise, 
GID  was  able  to  leverage  the  Active  Direc¬ 
tory  tools  to  control  system  level  access  to 
all  Linux  and  Unix  hosts. 

Now  the  company  has  set  up  group 
profiles  for  several  different  kinds  of 
employees,  so  admin¬ 
istrators  don’t  have 
to  configure  profiles 
individually.  Likewise 
also  produces  reports 
by  user,  by  date  and 
by  server.  The  number 
of  people  working  on 
a  given  audit  has  dropped  to  about  five, 
Arcuri  says. 

“At  the  end  of  the  day,  we  have  to  report 
on  this  stuff.  The  question  was  whether  or 
not  we  could  better  our  reporting,”  he  says. 
“Now  we  get  more  data  in  a  faster  time  and 
a  better  return-people-to-work  time.” 

The  implementation  cost  $400,000, 
but  the  company  expects  to  see  several 
hundred  thousand  dollars  to  $1  million 
per  year  in  savings,  mainly  stemming 
from  more  efficient  use  of  system  admin¬ 
istrators’  time,  Arcuri  says.  QI3 


Contact  Senior  Editor  Kim  S.  Nash  at  knash@ 
cio.com.  Senior  Editor  Thomas  Wailgum 
contributed  to  this  story.  To  comment,  go  to 
the  online  version  at  www.cio.com/article/ 
433763. 


Tell  Us  About  Your 

Quick  Wins 

Have  a  short-term  IT  projectthat  produced  bigsav- 
ings?  If  you  have  a  cost-cutting  project  you  imple¬ 
mented  within  three  months  and  which  generated 
savings  in  less  than  a  year,  we  invite  you  to  share  your 
story.  Go  to  www.cio.com/article/433763  or  e-mail 
Senior  Editor  Kim  Nash  at  knash@cio.com.  Your  proj¬ 
ect  may  be  featured  in  a  future  issue  of  CIO. 


Cut  Costs  Strategically 


Trim  the  fat,  not  the  muscle. 

Read  YOUR  I.T.  BUDGET:  WHEN 
CUTTING  COSTS,  LOOK  TO  THE 
FUTURE  at  www.cio.com/article/ 
389463. 

cio.com 
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Alignment 


What  CEOs 


A  CEO,  a  CIO,  an  academic  expert  and  a  recruiter  reveal 
howto  succeed  as  an  IT  leader  today,  and  howto  prepare 
forafast-approachingfuture.  edited  by  richard  pastore 


Reader  ROI 

::  The  CIO-CEO 
relationship  today 

::  CIOs’ strengths 
and  weaknesses 

::  Advice  for  becoming 
a  strategic  leader 


What  do  CEOs  want  from  their  CIOs,  and  how  can  CIOs 
build  on  the  power  they’ve  gained,  even  as  everything  around 
them  is  changing? 

CIO  tackled  this  subject  during  a  panel  discussion  at  the  CIO 
Leadership  Event,  recently  held  in  Boston.  Michael  Friedenberg, 
CEO  of  CXO  Media  (publisher  of  CIO),  discussed  the  changing 
role  of  the  CIO  and  the  importance  of  CIOs  as  strategic  business 
leaders  with  four  experts: 

Rajinder  (Raj)  Gupta,  executive  director  and  adjunct  profes¬ 
sor  at  Northwestern  University’s  Kellogg  School  of  Management 

Chris  Patrick,  partner  at  executive  search  firm 
Egon  Zehnder  International 

Robert  P.  Badavas,  president  and  CEO 
of  staffing  firm  TAC  Worldwide 

Steve  Merry,  VP  &  CIO,  Sara  Lee  International 
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Alignment 


"CEOs  are  so  engaged  in  keeping  the  business 
time  to  give  the  CIO  the  opportunity  to  be  a 


According  to  the  group,  much  of  the  CIO  traditional 
role— building  systems  and  keeping  them  running— is  a 
minimum  expectation.  But  not  every  CIO  is  ready  to  become 
a  strategic  player.  Nor  is  every  CEO  ready  to  cultivate  the 
strategic  value  of  IT.  Read  on  to  find  out  how  the  CIO  role  is 
evolving,  and  how  to  get  ready  for  the  future. 

The  Strategic 
Business  Leader 

Technology  itself  will  not  set  you  apart; 
you  need  far  more  business  expertise  than 
CIOs  of  yesteryear  did. 

CIO:  What  has  changed  about  what  CEOs  expect  from 
the  CIO? 


Raj  Gupta:  I  have  talked  to  IS  to  20  CEOs  directly,  and  they 
are  looking  for  someone  who  can  be  a  trusted  business  part¬ 
ner.  Of  course  the  CIO  has  to  keep  the  trains  running,  but 
CEOs  want  the  CIO  to  be  a  senior  leader  such  that,  when  you 
are  together  with  the  rest  of  the  executive  team,  it’s  hard  to 
tell  you  are  the  CIO. 

Chris  Patrick:  CEOs  want  people  who  can  connect  the  tech¬ 
nology  to  their  strategic  intent.  I  have  clients  who  are  invest¬ 
ing  billions  of  dollars  in  IT.  They  want  a  person  who  can 
show  the  team  the  ROI  from  this  investment. 

Bob  Badavas:  At  the  end  of  the  day,  what  CIOs  are  paid  to 
do  is  take  a  full  seat  at  the  strategic  planning  table  and  be  an 
integral  part  of  the  strategic  decision  making— which  means 
they  need  to  know  what  business  they’re  in.  Get  out  of  the 
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Sun's  Workplace  Resources 
Global  Lab  &  Datacenter  Design  Services  Team  (GDS) 

Bret  Rucker,  Ramesh  KV,  Dean  Nelson,  Petr  Vlasaty,  Serena  Devito, 
Mike  Ryan  &  Brian  Day  I from  left  to  right) 


running  that  they  have  trouble  finding 

STRATEGIC  BUSINESS  DRIVER." 

-RAJINDER  (RAJ)  GUPTA,  EXECUTIVE  DIRECTOR  AND  ADJUNCT  PROFESSOR, 

KELLOGG  SCHOOL  OF  MANAGEMENT 


office  and  find  out  why  people  buy  your  product  or  service. 
IT  is  a  strategic  weapon.  To  find  out  how  to  use  it,  the  CIO 
must  engage  with  clients  and  the  frontline  distribution  or 
sales  organization. 

Steve  Merry:  Technology  is  a  given;  we  need  to  get  value 
from  that  by  removing  the  clutter  and  making  it  easy  to 
use.  Then  we  can  sit  with  our  business  partners  and  take 
the  business  forward,  focusing  on  things  that  make  a  dif¬ 
ference-growth,  innovation  and  acquisitions. 

A  Two-Way  Street 

To  get  ready  to  become  a  “strategic  CIO,” 
you  need  to  sharpen  your  communication 
skills— and  work  for  a  CEO  who  supports 
today’s  version  of  the  CIO  role. 


I  don’t  know  of  any  CIO  or  CEO  who  would  disagree  with 
the  need  for  CIOs  to  drive  business  value.  But  not  every¬ 
one  is  succeeding  in  doing  that.  Do  CEOs  really  mean 
what  they  say  about  their  CIOs? 

Patrick:  CEOs  all  read  the  same  Harvard  Business  Review 
articles.  They  all  want  “strategic  CIOs.”  But  often  they  are 
not  sure  what  to  do  with  them  and  how  to  best  leverage  the 
talent  and  expertise  these  individuals  can  bring. 

Gupta:  While  everyone  wants  this  strategic  role,  both  sides 
are  not  quite  sure  if  the  CIO  is  ready.  The  test  I  pose  to  CIOs 
is,  Can  they  talk  to  the  management  committee  and  outside 
stakeholders  in  a  language  that  doesn’t  label  them  as  a  CIO? 
That’s  the  test  of  credibility. 

The  CEO  isn’t  quite  ready  as  well.  They  are  so  engaged  in 
keeping  the  business  running  that  they  have  trouble  find- 


CIO  Magazine's  Custom  Solutions  congratulates  APC  and  SUN  on  the  new... 

Sun  Microsystems  Data  Center 


•  The  World's  Largest  Single  Deployment  of  APC 
InfraStruXure  Hot-Aisle  Containment  Systems  (HACS). 

18  HACS  each  fully  equipped  with  230  APC  Netshelter 
VX  and  220  Sun  Packs,  InHow  Cooling,  Rack  Power 
Distribution,  Software  and  Environmental  Management 
spread  over  13,000  square  feet. 

•  Data  Center  is  supported  by  2.4  MegaWatts  of  uninterrupted 
power  supplied  by  3  -  800KW  APC  Symmetra®  MW 
Uninterruptible  Power  Supplies  (UPS). 

•  Sun's  efficient  datacenter  design  received  $473,000  in 
rebates  from  their  energy  provider  for  implementing  APC 
Critical  Power  and  Cooling  Solutions,  which  contributed 
to  a  total  rebate  of  $1.2  Million  overall.  The  total  rebates 
included  a  one  time  $250,000  innovation  award.  The  first  of  its 
kind  to  a  technology  company  in  the  Silicon  Valley. 

Featuring  Servers  and  Storage  by: 


•  HACS  averages  range  between  5kw  to  18kw  per  IT  rack, 
making  this  Sun's  highest  density  datacenter,  world  wide. 
No  raised  floor  required. 


•  Testing  proved  that  the  Symmetra  MW  offered  Sun  up 
to  97%  efficiency  and  that  over  a  10-year  period,  the 

possible  energy  savings  to  the  company  could 
exceed  $1  Million  on  the  3  installed  UPS  Systems. 


•  Sun  recently  measured  the  power  efficiency  of  this 
facility  which  resulted  in  a  PUE  of  1.28  ( DCiE 
efficiency  of  78%)!  This  significantly  reduces  the 
cost  of  operations  over  data  center 
pre-consolidation  levels. 


Engineered  for 


v/;/ 


{  InfraStruXure*  j 


To  learn  more  about  this  ultra  efficient  data  center  and  to  download  3  FREE  white  papers 
Visit  www.apc.com/promo  and  enter  Key  Code  c526w 
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Alignment 


"I.T.  IS  A  STRATEGIC  WEAPON.  To  find  out 
the  CIO  must  engage  with  clients  and  the 


ing  time  to  give  the  CIO  the  opportunity  to  be  a  strategic 
business  driver.  They  must  have  commitment  and  belief 
and  not  just  talk  the  talk. 

Bob,  as  our  representative  CEO,  how  do  you  respond 
to  that? 

Badavas:  CEOs  have  the  company  they  deserve.  If  I  say,  Get 
out  of  the  office,  and  don’t  give  you  a  travel  budget,  who  are 
we  kidding?  I  can’t  say  IT  is  important  if  I’m  cutting  initia¬ 
tives  that  could  enhance  the  value  of  our  infrastructure.  I 
can’t  pontificate  on  how  you  should  transform  yourself  if 
I’m  not  willing  to  make  a  personal  investment.  My  respon¬ 
sibility  to  all  my  direct  reports  is  to  have  an  environment 
that  allows  them  to  blossom  to  their  full  extent,  and  to 
allow  them  to  make  mistakes.  I  owe  them  the  opportunity 
to  grow  and  to  be  part  of  my  succession  plan.  I  have  had 
conversations  with  them  that  start,  “If  you  want  to  be  a  CEO 
someday...” 

Show  What  You  Know 

As  the  CIO,  you  get  a  bird’s-eye  view  of  the  busi¬ 
ness.  Make  sure  you  show  that  knowledge,  no 
matter  who  you’re  reporting  to  (and  give  your 
staff  the  chance  to  gain  that  knowledge  as  well). 
If  you  can’t  shine  where  you  are,  go  somewhere 
that  you  can. 

Patrick:  If  you  can  demonstrate  that  you’re  different  and 
bring  strong  business  skills,  you  will  be  in  demand. 

Merry:  Who  has  the  broadest  perspective  across  the  busi¬ 
ness?  The  CIO.  We’ve  seen  everything  done  several  times 
over  and  can  give  that  perspective  back  to  the  executive 
team.  But  we  must  have  the  [courage]  to  challenge  the  peo¬ 
ple  who  see  themselves  as  experts  in  their  function  area. 
Speak  up  or  you  don’t  have  the  right  to  be  in  the  room. 

CEOs  say  they  want  the  CIO  to  make  this  broad,  strategic 
contribution  as  a  business  partner,  yet  they  continue  to 
have  the  CIO  report  to  the  CFO. 

Badavas:  The  CIO  has  to  report  to  a  C-level  person  who 
believes  that  people  should  not  just  be  focused  on  their 
functional  silo.  It’s  fine  if  the  CIO  reports  to  a  CFO  who  is 


tracking  to  be  a  CEO.  But  if  it’s  a  functional-oriented  CFO, 
then  that  flows  downhill,  meaning  the  CIO  will  probably 
be  expected  to  focus  on  the  IT  function  only.  How  can  the 
CIO  communicate  the  value  of  IT  if  the  CFO  has  IT  sit¬ 
ting  in  a  corner  just  like  the  maintenance  function  of  the 
company? 

Patrick:  One  of  first  questions  I  get  from  CIOs  when  I’m  con¬ 
ducting  a  search  is,  “Tell  me  about  the  reporting  structure.” 
In  general,  the  reporting  structure  is  a  good  proxy  for  how 
strategic  the  role  ultimately  will  be.  It’s  not  an  absolute— I 
meet  some  highly  effective  and  strategic  CIOs  who  report  to 
CFOs.  But  it  is  a  good  indicator.  More  important  is  how  the 
company  is  structured.  Is  it  in  a  way  that  truly  leverages  the 
CIO  position?  It’s  clear  that  Steve  [Merry]  plays  a  strategic 
role  because  he’s  meeting  with  the  business  leaders  regard¬ 
less  of  who  he  reports  to.  It’s  not  black-and-white. 

Gupta:  The  reporting  relationship  is  just  one  indicator.  Is  the 
CIO  involved  in  the  informal  dialogue  that  happens  within 
senior  leadership  circles?  If  you  are  only  involved  when 
presenting  the  IT  plan,  then  the  opportunity  is  missed.  I 
think  CIOs  do  have  the  broadest  possible  perspective  of 
the  business.  But  why  doesn’t  the  rest  of  the  organization 
understand  that?  The  answer  lies  in  communication:  the 
ability  of  the  CIO,  and  just  as  importantly,  his  IT  team,  to 
speak  the  language  of  the  business. 

Merry:  It  has  to  extend  to  the  next  level  down.  If  my  direct 
reports  can’t  get  out  and  mingle  with  the  business  and  speak 
up  and  be  respected,  then  I  have  failed  too.  So  when  select¬ 
ing  the  next  level  down,  you  need  to  find  business- savvy 
people  who  can  converse  with  all  of  the  businesses  at  the 
level  where  things  actually  get  done.  (Read  “An  IT  Depart¬ 
ment  That  Means  Business,”  Page  52,  to  learn  out  how  MDS 
CIO  Tom  Gernon  builds  a  business-savvy  team.) 

Badavas:  The  layer  below  the  CIO,  and  the  CEO,  for  that 
matter,  is  the  enabler  of  how  high  we  can  fly  in  our  own 
positions.  If  my  executives  can’t  push  me  up  higher,  that  will 
impair  the  growth  of  my  company.  We  generally  don’t  spend 
enough  time  thinking  about  and  clearly  communicating  on 
succession  planning.  But  it’s  a  key  to  success.  A  philosophy  I 
adopted  long  ago  was  that  to  get  to  the  next  level  you  have  to 
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howto  use  it, 

frontline  distribution  or  sales  organization" 

-ROBERT  P.  BADAVAS,  PRESIDENT  AND  CEO,  TAC  WORLDWIDE 


behave  and  think  as  if  you  are  on  that  level.  If  you  don’t,  you 
won’t  get  there.  The  same  goes  for  your  direct  reports. 

Gupta:  Your  management  team  must  get  the  CEO’s  agenda. 
It’s  not  technology.  It’s  growth,  innovation,  risk  mitigation, 
alliances.  The  CIO  and  the  management  team  have  to  figure 
out  how  to  feed  into  that  agenda. 

Market  ITs  Value 

Other  executives  and  employees  won’t  know 
about  all  the  great  things  IT  is  doing— unless 
you  tell  them. 

Gupta:  Many  CIOs  see  “marketing”  as  a  dirty  word. 

Merry:  We  branded  our  IT  group.  We  gave  them  a  logo  and 
played  the  marketing  guys  at  their  own  game.  Sell  yourself 
because  you  have  something  to  sell. 

Badavas:  Don’t  market  “stuff.”  Market  the  value— the  result— 
you  caused.  That  will  have  people  sit  up  and  take  notice.  CEOs 
would  love  to  cut  through  the  preamble  before  the  answer. 
Start  with  the  answer  and  then  you’ve  got  my  attention. 

Patrick:  But  be  careful  what  you  ask  for.  If  you  ask  for  that 
seat,  you’d  better  be  able  to  deliver  value.  If  you  can  only 
talk  about  speed  and  feeds,  you’ll  find  yourself  quickly  out 
of  there. 

Badavas:  [CIOs  and  IT  leaders]  are  much  better  than  they 
think  at  talking  about  using  information  as  a  growth  driver. 

Get  Ready  for  the  Future 

The  CIO  role  will  continue  to  change  as  more 
tech-savvy  folks  enter  the  workforce  and 
sit  on  boards.  Make  sure  you’re  prepared  to 
collaborate  with  them  and  adapt  to  your 
company's  changing  needs. 

Look  into  your  crystal  ball:  What  does  the  role  of  the  CIO 
look  like  10  years  out? 

Gupta:  Boards  of  directors  are  going  to  get  younger,  and  they 


will  have  more  appreciation  of  technology.  So  there  will  be 
a  better  chance  for  that  connection  with  the  CIO  to  happen 
naturally.  But  since 
many  more  people  in 
the  organization  will 
understand  the  strate¬ 
gic  use  of  technology, 
the  person  with  the 
CIO  title  will  no  lon¬ 
ger  have  a  monopoly 
on  that.  Expectations  will  be  different  and  higher  as  both 
sides  get  more  sophisticated. 

Merry:  It  won’t  be  like  today.  We  won’t  have  the  typical  roles. 
There  will  be  more  collaboration  and  partnerships  with 
noncompeting  companies  in  the  use  of  technology  and  shar¬ 
ing  of  resources.  You  won’t  need  a  CTO  in  the  organization— 
EIP  will  do  that  and  you’ll  manage  the  relationship.  There 
will  be  a  much  smaller  senior  IT  team  working  with  the 
business  and  managing  relationships.  And  there  will  be  a 
lot  of  Indians  and  Chinese  in  our  organizations. 

What  advice  would  you  give  that  [CIOs]  could  use  to  get 
better  prepared  to  meet  the  new  CEO  expectations? 
Patrick:  Get  exposure  beyond  your  function  area  of  exper¬ 
tise,  and  get  international  experience— live  overseas.  I  look 
for  that  with  every  person  I  place.  And  though  it  seems 
basic,  work  for  good  companies.  People  want  to  hire  tal¬ 
ented,  innovative  change  drivers. 

Merry:  Be  brave  in  front  of  the  business  and  make  sure  you 
get  the  relationships  and  governance  right. 

Gupta:  Learn  the  CEO’s  agenda  and  get  yourself  and  your 
team  on  that  agenda.  Make  sure  the  CEO  knows  you  under¬ 
stand  that  agenda  while  you  also  keep  the  trains  running. 

Badavas:  Make  something  happen  from  a  business  perspec¬ 
tive.  Influence  your  peers,  articulate  future  possibilities  and 
just  be  bold.  BQ 


This  article  is  based  on  the  transcript  of  a  panel  discussion,  “Wanted: 
CIO  2.0— What  CEOs  Demand  From  Their  Next  IT  Leader,”  on  May  19, 
2008.  Share  your  comments  at  www.cio.com/article/382313 . 


Staff  for  the  Future 


Read  THREE  TIPS  FOR  CREATING 
A  BUSINESS-SAVVY  INFORMATION 
TECHNOLOGY  STAFF  at  www.cio 
.com/article/148451. 

cio.com 
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As  a  solution  the  software  is  winning  converts  among  IT  and 
business  leaders,  but  barriers  to  enterprise  adoption  of  open 
sourcestill  re  main, accord  ingtoourexclusiveC/Osurvey. 


Sorry,  you’ve  missed  your  chance  to  be  an  iconoclast. 


Reader  ROI 

::  How  IT  and  business 
leaders  view  open  source 

::  Which  application  types 
are  most  popular 

::  Barriers  to  enterprise 
adoption 


Open-source  solutions  are  becoming  more  commonplace  in  corporate 
IT  as  confidence  in  their  reliability  for  mission-critical  applications  grows 
among  both  IT  and  business  leaders,  according  to  an  exclusive  survey  con¬ 
ducted  by  CIO  magazine. 

The  research  also  identifies  where  the  friction  is  in  business  open-source 
adoption,  and  which  application  types  are  most  popular.  The  survey,  con¬ 
ducted  between  April  28  and  May  2  of  328  IT  and  business  executives, 
managers  and  staff,  sought  to  explore  their  attitudes  around  the  adoption 
of  open-source  solutions. 

Open  source  is  clearly  entering  the  enterprise  mainstream.  More  than 
half  (53  percent)  of  those  surveyed  use  open-source  applications  in  their 
organization  today,  and  an  additional  10  percent  plan  to  do  so  in  the  next 


46  AUGUST  1,  2008  |  www.cio.com 


PHOTO  BY  RICHARD  MORRELL/CORBIS 


Survey  absolutely  or  probably  have  enough  confidence  in 
Linux  to  use  it  for  mission-critical  applications. 


Making  Inroads 

More  than  60  percent  of  IT  and 
business  professionals  use  or  plan 
to  use  open  source. 


Currently 

using 

No  plans 
to  use 

open-source 

applications 

Planning  to 
use  in  the  next 
12  months 
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What  Makes  Open  Source 
Appealing— and  Not 

Money  talks  .  The  primary  reasons  enterprise 
IT  departments  adopt  open  source  are  financial,  according 
to  our  survey.  Lower  total  cost  of  ownership  (59  percent) 
and  acquisition  costs  (56  percent)  lead  the  pack.  Lower 
TCO  is  the  reason  most  frequently  cited  by  IT  execs  (63 
percent)  and  IT  staff  (58  percent)  for  adoption.  Business 
executives  say  lower  acquisition  costs  are  the  primary 
attraction  (62  percent). 

But  money  isn’t  everything.  Greater  flexibility  was 
cited  as  a  primary  reason  for  adoption  by  32  percent  of 
respondents,  and  access  to  source  code  is  a  motivation 
for  30  percent.  Attributes  of  the  source  code  itself  aren’t 
key  drivers;  better-quality  code  is  a  primary  reason  for 
adoption  by  just  12  percent,  and  product  functionality 


year.  For  44  percent,  open-source  applications  are  con¬ 
sidered  equally  with  proprietary  solutions  during  the 
software  acquisition  process. 

Among  those  currently  employing  open-source  solu¬ 
tions,  the  primary  uses  are  technical  in  nature:  operat¬ 
ing  systems  such  as  Linux  (78  percent);  infrastructure 
applications,  such  as  back-end  databases  and  Web  servers 
(74  percent);  and  software  development  tools  like  Eclipse 
(61  percent). 

Business  application  use  isn’t  far  behind.  Of  those 
surveyed,  45  percent  say  they  are  using  desktop  applica¬ 
tions  such  as  OpenOffice.org,  and  29  percent  use  open- 
source  enterprise  applications.  The  most  popular  of  those 
enterprise  applications  are  collaboration  tools,  customer 
relationship  management  (CRM)  tools  and  ERP  applica¬ 
tions.  (For  more  about  open-source  CRM  tools,  see  “Open- 
Source  CRM:  More  Control,  Less  Cost,  Page  21.) 

Open-source  desktop  and  enterprise  applications  are 
more  popular  in  small  companies  than  in  midsize  and 
large  companies.  Small-company  CIOs  traditionally  have 
more  autonomy  in  technical  decision  making,  as  well  as 
smaller  IT  budgets. 

Moreover,  open-source  solutions  are  generating  confi¬ 
dence.  Nearly  60  percent  of  respondents  agree  or  strongly 
agree  with  the  statement  that  Linux  is  reliable  enough  to 
depend  upon  for  mission-critical  applications.  Remark¬ 
ably,  that  confidence  is  highest  among  IT  executives  and 
managers:  62  percent  say  Linux  is  ready  for  prime  time. 

The  survey  shows  that  IT  leaders  are  finally  tumbling 
to  what  their  developers  already  believe.  Three-quarters 
(77  percent)  of  software  developers  responding  to  the  last 
Evans  Data  Open-Source  Software/Linux  Development 


Evaluating  Open- 
Source  Solutions 


Four  things  to  look  for 

Many  companies  are  perfectly  willing  to  adopt  an  open-source 
solution,  but  aren't  sure  how  to  measure  its  suitability  for  enterprise 
use.  Open-source  software  should  be  evaluated  along  similar  lines 
to  proprietary  software,  such  as  on  functionality  and  capability,  says 
Brian  Gentile,  CEO  of  JasperSoft,  which  provides  a  commercial 
open-source  business  intelligence  platform. 

To  determine  whether  an  open-source  product  or  vendor  is 
appropriate  on  other  criteria,  he  offers  the  following  checklist: 

1  Ensure  that  a  product  is  available  from  a  commercial 

open-source  company  with  the  licensing  mechanism  and 
resources  to  ensure  your  success,  such  as  customer  support. 

2  Check  the  size  and  vibrancy  of  a  vendor’s  community. 

This  helps  to  determine  the  success  possible  with  its 
products  better  than  its  annual  revenue. 

3  Learn  how  many  production  deployments  are  in  use  by 

other  commercial  enterprises.  That’s  a  strong  indicator  of 
the  product's  (and  the  vendor's)  ability  to  really  deliver. 

4  Apply  standard  evaluation  techniques  used  with  propri¬ 
etary  vendors,  such  as  quality  of  the  product  road  map, 
strength  of  the  company’s  personnel  and  availability  of 
training  and  professional  consulting  services.  -E.S. 
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by  22  percent. 

While  the  survey  found  nearly  two-thirds  of  companies 
are  using  open  source  today  or  plan  to  use  it  soon,  there  are 
still  barriers  to  adoption.  Topping  the  list:  product  support 
concerns  (45  percent).  Enterprises  clearly  want  assurance 
that  someone  will  answer  tech  support  calls.  Among  those 
who  don’t  use  open  source,  a  third  (32  percent)  also  identi¬ 
fied  product  support  concerns  as  a  primary  problem. 

Secondary  issues  include  the  awareness  or  knowledge 
of  available  solutions— that  is,  the  ease  of  learning  that  an 
open-source  application  is  available  (29  percent),  security 
concerns  (26  percent),  and  lack  of  support  by  management 
(22  percent).  (See  “Evaluating  Open-Source  Solutions,” 
Page  47.) 

While  the  survey  shows  that  product  support  is  a  key 
concern,  Dominic  Sartorio,  president  of  the  Open  Solu¬ 
tions  Alliance  (OSA),  says  that  interoperability  with  pro¬ 
prietary  software— especially  Microsoft  products— comes 


Few  Policies  in  Place 

Only  one-quarter  of  respondents 
have  a  formal  open-source  policy. 


Formal  policy 
currently  in  place 
for  open-source 
applications 

Planningto 
implement  in  the 
next  12  months 

No  plans  for  a 
formal  open- 
source  policy 
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IT  Leaders  Encouraged  to  Contribute 
Enterprise  Code  to  Open-Source  Projects 

Companies  can  benefit  by  releasing  in-house  customizations  to  the  open-source  community 


Open  source  is  no  longer  a 
novelty,  even  within  the  larg¬ 
est  corporations.  However, 
not  enough  of  those  busi¬ 
nesses  are  contributing  code 
back  to  the  open-source 
community,  said  Jim  White¬ 
hurst,  president  and  CEO  of 
Red  Hat,  at  the  Red  Hat  Sum¬ 
mit  in  June.  And  such  con¬ 
tributions  would  benefit  the 
enterprise  even  more  than  it 
would  the  development  com¬ 
munity,  he  explains. 

Accord  i  ng  to  J  i  m  Zem  I  i  n , 
executive  director  of  The  Linux 
Foundation,  75  percent  of 
software  is  written  for  in-house 
use.  As  Whitehurst  pointed 
out,  much  of  that  code  is 
never  used— a  true  waste  of 
resources.  "Think  how  much 
software  is  written  out  there 
that  is  behind  proprietary 
walls,"  Whitehurst  says. 


Often,  a  company  will  cre¬ 
ate  an  innovative  technology 
solution,  using  open-source 
software  such  as  the  Linux 
operating  system,  that  can  be 
appreciated  by  other  devel¬ 
opers  and  users.  Whitehurst 
sees  this  as  an  opportunity  to 
evangelize  the  power  of  open 
source  to  help  businesses 
work  more  efficiently. 

Zemlin  agrees  about  the 
importance  of  getting  sophis¬ 
ticated,  internal  developers 
involved,  which  he  sees  as  an 
untapped  brain  trust.  "Get¬ 
ting  those  people  to  contrib¬ 
ute  to  the  process  is  critical,” 
he  says. 

For  example,  Whitehurst 
says,  the  Red  Hat  Enterprise 
MRG  real-time  messaging 
functionality  in  Linux  was 
originally  written  by  J.P. 
Morgan  for  its  internal  needs. 


But  any  enhancements  the 
company  would  make  would 
fork  the  OS,  requiring  the 
company  to. reimplement  its 
customizations  every  time  it 
upgraded  its  Linux  comput¬ 
ers.  According  to  Whitehurst, 
JP  Morgan’s  CIO  realized 
that  support  costs  could  be 
reduced  by  contributing  the 
source  code  to  the  Linux 
community.  Other  Linux 
users  would  benefit,  which 
would  be  nice...  but  more 
important  to  JP  Morgan, 
thecompany  wouldn't  have 
to  invest  its  own  resources 
in  maintaining  an  internal 
application.  The  MRG  code 
would  now  be  updated  and 
enhanced  by  Linux  develop¬ 
ers  at  large,  in  addition  to  any 
committers  on  its  own  staff. 

This  isn’t  exactly  uncom¬ 
mon.  As  reported  in  CIO’s 


survey,  49  percent  of  those 
who  use  open  source  often 
or  sometimes  report  bugs 
or  contribute  their  changes 
back  to  the  open-source 
community;  11  percent  have 
open-source  committers  on 
their  staff. 

The  most  effective  ways 
for  enterprises  to  contribute 
to  open  source  projects  is 
when  their  own  self  interest  is 
involved,  according  to  Zemlin. 
A  company  that  has  to  rewrite 
everything  for  an  in-house 
legacy  application  or  device 
driver  will  often  be  held  back 
by  the  reluctance  to  upgrade. 
Instead,  “It  would  be  better 
to  submit  changes  into  the 
[Linux]  mainline,”  he  says,  cre¬ 
ating  a  sustainable  system  for 
which  the  enterprise  no  longer 
has  to  be  the  only  source  of 
development  resources.  -E.S. 
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CONQUERING 

INFORMATION  MANAGEMENT 

CHALLENGES 


Turning  tacit  knowledge  into  actionable  insight 


T 


foday’s  enterprise  is  a  vast  amalgam  of  informa¬ 
tion,  generated  by  employees,  suppliers,  partners 
and  customers.  The  enterprise  variously  stores 
this  information  in  and  exchanges  it  among  databases, 
content  management  applica¬ 
tions,  data  warehouses,  depart¬ 
mental  file  servers  and  even  in¬ 
dividual  employees’  hard  drives. 

While  all  these  repositories  make 
it  easier  to  access  information, 
their  disparate  nature  makes  it 
hard  to  analyze  the  information. 

Without  an  overarching  struc¬ 
ture  for  data,  it’s  impossible  for 
enterprises  to  sense  patterns  or 
trends.  Without  that  insight,  it’s  more  difficult  to  identify 
either  incipient  problems  or  potential  areas  for  expansion 
and  innovation. 

Organizations  are  moving  away  from  focusing  on  busi¬ 
ness  processes  that  treat  information  as  an  afterthought.  In¬ 
stead,  they’re  adopting  strategies  that  turn  tacit  organizational 
knowledge  into  explicit,  actionable  business  intelligence  to 
address  competitive  threats,  serve  customers  better,  launch 
new  products  and  increase  profits. 

Forward-thinking  companies  are  already  working  on 
this  challenge.  A  recent  survey  of  100  senior  corporate 
and  IT  managers  of  large  enterprises  conducted  by  IDG 
Research  found  that  58  percent  of  respondents  have  a 
comprehensive  information  management  strategy.  But 
what  keeps  the  other  42  percent  from  implementing  such 
a  strategy?  The  challenges  range  from  cultural  to  struc¬ 
tural.  Nonetheless,  it  is  possible  for  companies  to  develop 
a  strong  information  management  framework— it  simply 
takes  some  concerted  groundwork. 


Practically  speaking,  companies  are  looking  to  create 
a  taxonomy  or  superstructure  for  their  financial  and  op¬ 
erational  information  first  to  establish  consistency  and  ac¬ 
curacy,  then  to  extract  insight  and  enlightenment.  Simply 

put,  effective  information  man¬ 
agement  ensures  the  right  people 
have  access  to  the  right  data  at 
the  right  time. 


Cultural  concerns 

Corporate  cultures  that  don’t  val¬ 
ue  having  an  enterprise-wide  in¬ 
formation  management  strategy 
are  often  born  of  the  perception 
that  short-term  problems  don’t 
require  long-term  strategies  to  solve.  Many  key  performance 
indicator-based  problems,  after  all,  appear  easy  to  solve. 

Lacking  an  enterprise  approach,  organizations  typically  ad¬ 
dress  information  management  issues  tactically  with  point 

solutions.  _ 

Treating  the  symptom,  however, 
rarely  cures  the  underlying  problem.  For  Thj$  peer.based 
example,  any  component  in  a  piecemeal  thought  leadership 

system  is  susceptible  to  generating  infor-  program  analyzes 

,  ,  ,.  quantitative  research 

mation  that  could  be  ambiguous  or  even  ,  , 

°  and  tests  it  via 

corrupted.  In  either  case,  costs  escalate  qualitative  interviews 

and  opportunities  are  lost  as  a  result.  with  actual  CIOs. 

The  first  step  to  focus  on  information  resulting 

executive  insight  is 

management  is  for  the  executive  team  ^ben  (j issem i nated 

to  explore  what  information  they  need  via  CXO's  multimedia 

to  run  their  business,  how  they  connect  assets-  learn 

.  r  .  ,  .  .  .  more  about 

information  to  business  strategy  and  key  „,nof,,n 

bJ  ’  CI02CI0  program, 

performance  indicators,  and  how  they  can  please  contact 
reconcile  the  information  stored  through-  mavery@cxo.com. 
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out  their  enterprise’s  data  repositories. 

Another  key  is  to  identify  the  executives  responsible 
for  managing  information  and  deciding  what  information 
is  needed.  This  is  especially  important  for  the  board,  whose 
oversight  is  often  overlooked.  In  the  IDG  Research  survey, 
only  38  percent  of  respondents  said  their  board  had  oversight 
relating  to  information  management  strategy  and  controls. 
Given  any  boards  accountability  to  the  public  markets  for 
financial  performance,  its  involvement  is  critical. 

The  CFO  and  CIO  need  to  work  closely  together,  col¬ 
laborating  also  with  business  unit  heads  from  across  the 
enterprise  to  reduce  siloed  development  and  make  infor¬ 
mation  production  more  robust.  To  achieve  this,  enter¬ 
prise-wide  rules  and  definitions  that  provide  structure  for 
data  must  be  established,  and  data  should  be  standardized 
across  disparate  systems.  This  undertaking  is  by  no  means 
insubstantial.  To  blunt  the  impact,  organizations  should 
take  small,  iterative  steps  that  yield  short-term  results  and 
build  organizational  confidence. 

Imposing  structure 

Obstacles  to  formulating  effective  information  manage¬ 
ment  strategy  map  across  both  financial  and  operational 
data  domains,  though  there  are  clear  distinctions  between 
financial  (ledger)  data  and  operational  (non-ledger)  data. 
Thanks  to  entities  like  the  SEC  and  principles  like  GAAP 
(Generally  Accepted  Accounting  Principles),  there’s  little 
flexibility  in  financial  data.  The  goal  is  to  bring  that  kind 
of  structure  to  operational  data. 

Unfortunately,  there  are  no  agreed  upon  processes  and 
standards  for  operational  data.  Every  enterprise  is  free  to  ag¬ 
gregate,  measure  and  interpret  operational  data  in  whatever 
manner  they  choose.  In  some  cases,  the  result  is  relatively 
harmless  ambiguity.  In  others,  the  results  are  lost  opportu¬ 
nity  or  even  increased  risk.  To  formulate  and  implement  an 
effective  information  management  strategy,  assess  the  value 
of  information  across  the  enterprise  to  help  prioritize  invest¬ 
ments  and  guide  activities.  Part  of  the  open-source  MIKE2.0 
initiative  is  an  online  survey  tool  that  walks  you  through  the 
information  valuation  process.  Point  your  browser  to  www. 
bearingpoint.com/knowmore  to  access  it. 

Develop  principles  to  apply  to  data  and  let  those  prin¬ 


ciples  drive  the  organization.  Take  an  integrated  approach 
that  considers  complex  issues  across  the  enterprise.  Make 
sure  all  senior  leaders  collaborate  to  achieve  common  goals 
defined  by  a  comprehensive  program.  Strategize  at  a  level  of 
detail  that  allows  flexibility  in  how  you  respond  to  change. 

Tactically,  enterprises  should  consider  what  data  they 
require  to  solve  a  particular  problem,  such  as  reaching  the 
right  customer  with  a  marketing  campaign  or  supporting 
an  annual  report.  How  do  you  get  accurate  metrics?  How 
can  you  manage  your  common  data  in  a  manner  that  en¬ 
sures  consistency  across  the  enterprise? 

Finally,  put  in  place  an  architecture  and  the  technol¬ 
ogy  that  allow  you  to  manage  data  across  a  highly  federated 
environment,  meeting  current  needs  while  accommodating 
future  developments.  Once  all  those  pieces  are  in  place,  in¬ 
formation  management  will  be  at  the  core  of  your  business. 


Go  to  www.cio.com/whitepapers/im  to  download 

the  free  white  paper  “Conquering  Information  Management 
Challenges.  ”  Based  on  a  major  survey  by  IDG  Research,  the 
report  features  in-depth  discussions  with  CIOs  and  draws  on 
peer  insights  to  help  them  manage  their  data. 


An  Open  Source  Approach 
to  Information  Management 

BearingPoint,  a  leading  management  and  technology  con¬ 
sulting  company  serving  Fortune  2000  companies  and  many 
of  the  world’s  largest  public  service  organizations,  has  donated 
much  of  its  information  management  practices  to  the  open 
source  movement  in  answer  to  the  decided  lack  of  standards 
governing  operational  data.  The  initiative,  dubbed  MIKE2.0 
(Method  for  an  Integrated  Knowledge  Environment)  pro¬ 
vides  an  information  development  framework  that  can  be 
applied  to  information  governance,  improving  data  quality, 
data  warehousing,  data  management  and  more. 

Learn  more  about  MIKE2.0  at 
www.bearingpoint.com/knowmore  or 
www.openmethodology.org 
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Open-source  solutions  are  generating 
confidence.  More  than  half  of  survey 
respondents  agree  or  strongly  agree 
that  Linux  is  reliable  enough  to  depend 
on  for  mission-critical  applications. 


up  more  frequently,  particularly  in  larger  organizations. 
‘“It’s  the  big  problem  that  the  industry  has  done  the  least 
to  address’  is  something  we’ve  heard  multiple  times,” 
says  Sartorio.  Fortunately,  he  says,  commercial  open- 
source  vendors  have  tailored  their  product  development, 
support  and  services  offerings  accordingly.  Plus, 
open-source  consortia  have  given  particular  attention 
to  the  issue. 

The  quality  of  the  open-source  applications  them¬ 
selves  aren’t  as  big  a  deal.  Software  quality  issues  are 
cited  as  a  primary  barrier  to  adoption  by  20  percent  and 
customization  concerns  by  15  percent. 

One  item  that  may  quell  the  fears  of  enterprises  con¬ 
templating  open-source  solutions:  Once  you  have  the 
software  in-house,  code  quality  concerns  become  far  less 
important.  Enterprises  that  aren’t  using  open  source  cite 
code  quality  as  one  of  their  top-three  issues.  However, 
those  who  have  been  working  with  the  applications  put 
it  further  down  the  list  at  number  seven.  Once  you  have 
your  hands  on  the  code,  apparently,  you  discover  the  situ¬ 
ation  is  better  than  you  imagined. 

Open-source  developers  have  somewhat  different  pri¬ 
orities  than  do  their  managers.  According  to  the  Evans 
Data  survey,  the  biggest  obstacles  to  adoption  are  a  cor¬ 
porate  preference  for  proprietary  software,  lack  of  device 
drivers  and  the  need  to  learn  a  new  set  of  skills.  The  qual¬ 
ity  of  support  was  the  biggest  obstacle  to  only  15  percent 
of  developers. 

Making  Open  Source  Work  In-House 

Aboilt  cl  quarter  of  corporations  (27  percent) 
have  a  formal  policy  in  place  regarding  open-source 
applications,  though  18  percent  expect  to  adopt  such  a 
policy  in  the  next  12  months.  Of  those  with  open-source 
policies,  45  percent  feel  their  policies  are  very  effective 
and  46  percent  somewhat  so. 

While  more  than  half  of  enterprises 
use  open  source  today,  the  degree  of 
intimacy  they  have  with  the  philoso¬ 
phy  (users’  freedom  to  run,  copy,  dis¬ 
tribute,  study,  change  and  improve  the 
software)  varies  quite  a  bit.  Companies 
may  often  (43  percent)  or  sometimes 


(24  percent)  treat  such  applications  as,  well, 
just  free  software;  they  run  the  application 
but  don’t  even  look  at  the  source  code. 

Although  they  can  access  the  source 
code,  it  isn’t  common  for  enterprise  IT 
departments  to  use  open-source  modules 
in  their  own  code,  whether  or  not  they 
make  code  changes.  For  example,  18  per¬ 
cent  often  use  unchanged  code  modules 
as  though  the  modules  are  a  free  source  library,  and  36 
percent  do  so  occasionally.  Still,  nearly  half  of  respon- 


Why  Use  Open  Source? 

Lower  TCO  tops  the  list  of  reasons. 

Lower  total  cost  of  ownership 


Lower  acquisition  costs 


Greater  flexibility 


Access  to  source  code 


Ease  of  customization 


Product  functionality 


32% 


30% 


28% 


22% 


12% 


Better  quality  code 


8% 


Security 


Other 


6% 


(Respondents  could  select  up  to  three  choices.) 


59% 


56% 
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Tips  for  Setting  Policy 


dents  often  or  sometimes  report  bugs  or  contribute  their 
changes  back  to  the  open-source  community;  11  percent 
have  open-source  committers  on  their  staff  (see  “IT  Lead¬ 
ers  Encouraged  to  Contribute  Enterprise  Code  to  Open- 
Source  Projects,”  Page  48). 

Once  open  source  was  rejected  as  appropriate  for 
enterprise  use.  Clearly,  that’s  no  lon¬ 
ger  the  situation  today.  BEI 


To  see  how  other  companies  handle 

OPEN  SOURCE,  read  DEVELOPING 
OPEN-SOURCE  BUSINESS  POLICIES 
at  www.cio.com/article/429813. 

cio.com 


Senior  Editor  Esther  Schindler  can  be 
reached  at  eschindler@cio.com.  To  com¬ 
ment  on  this  story,  go  to  www.cio.com/ 
article/375916. 
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Think  Tank  J0HN  BALD0NI 


Don’t  Lead  With  Your  Ego 

A  big  ego  can  be  a  bad  thing  when  it  comes  to  leadership. 

Here’s  how  to  keep  yours  from  getting  in  the  way. 


hy  do  organizations  fail?  That  is  a  question  that 

business  school  professors  use  to  provoke  students  to  inves¬ 
tigate  reasons  why  companies  did  not  fulfill  expectations.  One 
reason  that  noted  author  and  global  consultant  Ram  Charan 


gives,  and  has  written  extensively  about,  is  a  failure  of  execution.  Companies 


dream  big,  but  the  rest  of  the  organization  never  embraces  that  dream  and  it 


fails. 


While  execution  is  a  prime  reason,  I  believe 
there  is  another,  perhaps  deeper  reason— one  that 
is  more  encompassing:  ego.  Put  more  bluntly,  out- 
sized  ego. 

Let’s  look  at  two  examples.  Former  Secretary  of 
Defense  Donald  Rumsfeld  used  his  power  and  sense 
of  entitlement  to  manage  the  war  in  Iraq.  Under  his 
tenure  dissent  was  quashed,  generals  were  cowed 
and  strategic  changes  were  never  implemented.  As 
a  result,  he  was  forced  out  in  December  2006  after 
the  Republicans  lost  control  of  Congress.  Mean¬ 
while,  the  war  rages  on. 

Similarly  Citigroup,  one  of  the  world’s  leading 
financial  institutions,  has  lurched  from  crisis  to  cri¬ 
sis.  As  reported  by  Fortune  magazine,  some  prob¬ 


lems  were  provoked  by  the  missteps  of  its  CEOs, 
from  Walter  Wriston  through  John  Reed  and  Sandy 
Weill.  Each  of  these  CEOs  was  a  talented  senior 
manager,  but  each  overreached  and  stretched  for  a 
goal  too  far.  As  a  result,  Citigroup  suffered. 

Rumsfeld  and  the  Citi  CEOs  put  their  egos  in 
front  of  more  prudent  management.  While  ego  is 
necessary  to  good  leadership,  it  should  not  be  the 
basis  for  it.  Senior  leaders  are  always  under  pres¬ 
sure  to  perform.  Sometimes  the  pressure  to  act 
overrides  rationality. 

Taking  time  to  reflect  before  making  critical 
decisions  may  avoid  some  egregious  decisions  and 
mistakes.  So  before  acting,  ask  yourself  the  three 
following  questions. 
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Why  Am  I  Doing  This? 

Leaders  want  to  put  their  stamp  on  the  organization. 
They  want  to  make  their  leadership  felt.  This  is  fine,  but 
sometimes  this  pressure  can  lead  them  to  make  decisions 
that  are  about  themselves  and  not  the  company.  They  are 
more  eager  to  see  their  name  on  the  cover  of  a  magazine 
than  to  practice  sound  management.  The  late  president 
of  Turkmenistan,  Saparmurat  Niyazov,  ordered  that  the 
months  of  the  calendar  be  renamed  in  honor  of  him  and 
his  family.  Out-of-control  ego  can  be  expensive  and  so  it 
is  wise  to  ask  why  before  acting.  Doing  something  for  the 
sake  of  your  ego  is  unacceptable. 

What  Will  Be  the  Outcomes? 

Pushing  for  growth  or  to  make  a  new  acquisition  can 
stretch  the  company  beyond  its  capacity  to  deliver.  It 
can  cripple  the  company’s  ability  to  remain  competitive. 
Therefore,  senior  leaders  need  to  think  about  whether 
the  goal  or  the  outcome  is  achievable 
as  well  as  sustainable.  From  time  to 
time  we  learn  of  companies  stretch¬ 
ing  themselves  to  achieve  jumps  in 
market  share.  Everything  becomes 
geared  to  volume  rather  than  to  prof¬ 
its;  extra  resources  are  applied  to 
drive  the  market  share  skyward.  While  share  may  rise, 
the  cost  in  marketing  dollars— as  well  as  extra  resources 
and  manpower— is  often  too  high  to  justify  the  increase 
in  volume. 

How  Will  People  Support  It? 

Here  is  the  part  that  many  leaders  get  wrong.  For  the 
best  of  reasons  they  point  their  companies  toward  new 
ventures  without  checking  two  things.  First,  do  we  have 
the  people  in  place  to  make  it  happen?  And  will  our  team 
support  this  extra  effort? 

Getting  the  right  people  in  place  is  one  part  of  the  equa¬ 
tion;  it  may  require  training  and  development  as  well  as 
hiring  new  people.  Gaining  buy-in  is  often  presumed  rather 


While  ego  is  necessary  to 
good  leadership,  it  should 
not  be  the  basis  for  it.  Senior 
leaders  are  always  under 
pressure  to  perform. 

Sometimes  the  pressure  to 
act  overrides  rationality. 

than  groomed.  If  employees  do  not  understand  the  reasons 
why  they  should  do  something  new  or  different,  they  will 
not  do  it.  Resistance  can  doom  many  initiatives  to  failure.  IT 
leaders  know  the  price  of  change  more  than  most  since  they 
are  the  ones  charged  with  implementing  system  upgrades 
that  many  employees  may  find  onerous. 

Make  no  mistake:  Ego  is  a  vital  component  of  leader¬ 
ship.  Ego  puts  steel  into  the  spine;  it  is  fundamental  to 
making  things  happen.  Ego  is  criti¬ 
cal  to  self-definition.  Without  it  the 
leader  would  defer  to  others  because 
he  would  believe  they  could  do  the  job 
better.  Therefore,  ego  is  essential. 

Ego  can  also  be  that  inner  voice  of 
wisdom  that  says,  “Hold  on  a  minute. 
Why  are  you  doing  this?”  Paying  attention  to  the  answer, 
especially  when  it  bucks  the  expectations  of  others— or 
even  your  own  expectations— is  vitally  important.  Listen¬ 
ing  to  and  acting  on  that  voice  is  also  one  of  the  hallmarks 
of  leadership.  HE] 


John  Baldoni  is  a  leadership  and  communications  consultant  who 
works  with  Fortune  500  companies  as  well  as  with  nonprofits. 
He  is  the  author  of  seven  books  on  leadership. 

His  latest,  Lead  by  Example:  50  Ways  Great 
Leaders  Inspire  Results,  will  be  published  in 
October.  Visit  his  leadership  resource  website 
at  www.johnbaldoni.com.  To  comment  on  this 
article,  go  to  www.cio.com/article/364863. 
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For  more  advice,  read  John  Baldoni's 

ON  LEADERSHIP  column  at  www.cio 
.com/author/41111. 
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The  Strategic  CIO 


An  IT  Department 
That  Means  Business 

The  CIO  of  pharmaceutical  testing  company  MDS  has  built 
a  team  that  contributes  to  the  company’s  top  line 


^FULFILLING  THE  ROLE'S  NEW  MANDATE 
By  the  leaders  of  the  CIO  Executive  Council 


In  today's  weak  economy,  companies  tend  to  think  of  IT  mainly 

as  an  engine  for  cost  reduction  and  increased  efficiency.  But  in  many  indus¬ 
tries,  including  the  pharmaceutical  testing  business  in  which  MDS  oper¬ 
ates,  IT  can  and  should  drive  top-line  growth.  The  path  to  being  an  effective 

!  I 

■ 

partner  in  growth  begins  with  an  IT  team  that  has  a  strong  understanding  of 
the  business,  a  commercial  orientation  and  a  focus  on  the  end  customer. 


A  commercially  oriented  team  needs  a  core  of 
program  managers  and  business  analysts.  They 
can  sit  down  with  the  business,  understand  what 
business  users  are  asking  for,  and  then  translate 
that  to  our  internal  and  external  technology  part¬ 
ners.  Your  reputation  as  the  right  group  to  deliver 
commercial  solutions  rests  on  their  shoulders. 

I’ve  been  involved  in  the  delivery  of  big  applica¬ 
tions,  including,  in  1996,  the  first  customer  website 
at  Fidelity  Investments.  Projects  that  fail,  I  have 
found,  are  most  often  the  ones  in  which  IT  has  an 
internal  mind-set.  The  successful  ones  tend  to  have 
IT  staff  involved  who  appreciate  the  external  cus¬ 
tomer.  For  example,  as  I  learned  early  in  my  career, 
it’s  one  thing  to  have  a  bug  that  affects  internal  peo¬ 
ple.  You  can  quickly  react  to  it  and  have  direct  dia¬ 
logue  with  the  end  users  about  the  problem.  That’s 


not  the  case  with  external  customers,  which  has 
bigger  ramifications.  When  I  know  what  we  do  will 
affect  a  customer,  I  look  for  people  who  have  good 
business  sense  and  who  understand  what  it  means 
to  have  a  commitment  to  the  customer. 

The  Competitive  Advantage 

When  I  started  at  MDS  two  and  a  half  years  ago, 
we  had  a  key  project  that  had  gotten  off  to  a  rocky 
start.  We  were  developing  a  system  to  help  manage 
customers’  clinical  trials  and  deliver  results  from 
these  trials.  It  seemed  that  whenever  we  got  the 
technology  side  working,  the  business  side  broke, 
and  when  we  got  the  business  side  right,  the  tech¬ 
nology  side  broke. 

To  set  the  project  right,  we  paired  a  good  high- 
level  project  manager  from  the  business  with  one 
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My  entire  team  goes  on  sales  calls.  The  salesperson  isn't  going 
to  ask  what  systems  customers  would  like  or  what  our  competi¬ 
tors  have.  But  IT  can  engage  customers  in  that  conversation. 


from  IT  to  get  a  more  focused  view  of  the  features  this  appli¬ 
cation  needed.  The  IT  manager  brought  a  good  understand¬ 
ing  of  the  business,  strong  skills  in  managing  the  necessary 
compromises  and  a  drive  to  see  the  project  completed. 


Howto  Talk  Business 
With  the  Board 

Board  members  don’t  want  to  hear  about 
technology.  You  need  to  tel  I  them  how  you're 
helping  the  company  make  money. 


I  never  want  to  look  like  the  IT  guy  who  talks  just 
about  technology.  So  when  I  presented  to  the  MDS 
board  of  directors  at  its  last  meeting  (as  I  do  twice  a 
year),  I  spoke  about  some  of  the  commercially  oriented 
initiatives  IT  has  been  driving  or  enabling.  These  include 
our  system  for  managing  customers’  clinical  trial  data, 
which  is  helping  us  generate  new  sales. 

When  it  comes  to  working  with  the  board,  I  do  almost 
everything  in  partnership  with  a  business  peer.  So  I’ll 
have  the  business  unit  president  in  the  room  with  me, 
and  we’ll  support  each  other.  It’s  important  to  show  that 
IT  is  a  business-focused  and  business-enablingfunction. 

A  lot  of  what  I  talk  about  is  how  we  ensure  that  our 
projects  meet  business  needs,  how  IT  provides  better 
capabilities  to  the  end  customer  and  how  ourtechnology 
is  perceived  in  the  marketplace.  For  example,  we  have 

customer  com¬ 
ments  and  studies 
that  show  the  deals 
we’ve  been  winning 
because  of  the  clini¬ 
cal  trials  manage¬ 
ment  system.  I  also  focus  on  world-class  benchmarks, 
comparing  ourselves  to  what  the  best  companies  are 
doing  with  IT,  the  actions  we’re  taking  to  get  to  their  level. 

I'm  fortunate  in  that  we  have  a  board  member  who 
was  a  senior  executive  at  a  leading  technology  provider 
and  outsourcer.  But  board  members  want  to  understand 
business  impact  of  IT.  Avoid  the  technology  talk  and 
explain  how  you  are  enabling  the  organization  or  creat¬ 
ing  business  opportunities.  -T.G. 


More  About  Top-Line  Growth 


Read  how  CIOs  are  FOCUSING  ON 
GENERATING  REVENUE  at  www 
.cio.com/article/23927. 
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Within  six  months  we  had  it  ready.  The  expectations  within 
the  business  were  that  this  system  would  put  us  only  at  par 
in  the  marketplace.  But  customers  have  said  this  system  is 
the  gold  standard  in  the  marketplace  and  a  competitive  dif¬ 
ferentiator.  We  are  winning  customers— and  growing  the  top 
line— with  this  system. 

A  Customer-Focused  Team 

We  have  team  members  with  strong  business  skills  because 
I  recruit  for  and  develop  them.  Furthermore,  I  have  not  cen¬ 
tralized  my  application  teams;  I  want  people  to  develop 
industry  knowledge  in  order  to  support  specific  business 
units  and  understand  their  customers. 

My  entire  team  goes  on  sales  calls;  it’s  important  for  IT  staff 
to  hear  directly  what  the  customer  wants.  The  salesperson 
isn’t  going  to  ask  what  kind  of  systems  customers  would  like 
or  what  technology  our  competitors  have.  But  IT  can  engage 
customers  in  that  conversation,  and  the  salespeople  hear  the 
answers.  That  can  build  momentum  for  a  specific  initiative. 

I  have  not  imposed  a  quota  for  going  on  sales  calls,  but  I’ve 
hired  people  who  like  to  do  it.  They’re  harder  to  find,  of  course. 
In  fact,  that’s  the  biggest  staffing  challenge  I  have.  But  I  think 
people  who  like  to  work  with  the  business  tend  to  like  to  be  in 
front  of  customers.  Their  idea  of  success  is  making  sure  they 
meet  business  needs,  not  only  that  they  are  putting  in  a  great 
technology  solution.  Meanwhile,  an  affinity  for  our  business 
is  essential  to  career  development  in  my  organization.  I  have 
a  preference  for  buying  systems  rather  than  building  them; 
we  build  our  own  when  there  aren’t  viable  solutions  in  the 
marketplace.  Because  of  this,  I’m  not  sure  I  can  give  developers 
the  career  path  that  will  lead  to  senior  development  roles. 

But  I  know  I  can  offer  a  great  career  path  to  somebody  who 
is  a  program  manager  or  business  analyst— or  even  a  devel¬ 
oper  who  wants  to  move  into  one  of  these  roles  because  his 
skill  sets  can  easily  translate  to  the  skills  needed  to  become  IT 
directors,  to  support  the  IT  needs  of  a  business  unit  and  ulti¬ 
mately  to  take  my  job.  In  fact,  that’s  my  number-one  interview 
question  for  any  IT  leadership  role.  If  the  candidate  doesn’t  say 
he  wants  my  job,  then  he’s  the  wrong  person,  mu 


Tom  Gernon  is  CIO  of  MDS  and  is  a  member 
of  the  CIO  Executive  Council.  He  was  COO  of 
D2Hawkeye,  a  healthcare  software  company,  and 
has  held  CIO  positions  at  both  PerkinElmer  and 
J.P.  Morgan  Invest.  Share  your  comments  at  www 
.cio.com/article/424363. 
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CALL 

FOR 

ENTRIES 

Ones 

toWatch 

AWARDS  2009 


We’re  looking  for  the  next  generation  of  standout  IT  leaders.  Nominees 
should  currently  be  top  IT  lieutenants— but  not  yet  full-fledged  CIOs. 

Visit  public.cxo.com/awards/otw_2009_application.html  today  to  apply. 


Apply 


Candidates  will  be  nominated  by  their  CIO  based  upon  the 
characteristics  identified  in  the  application  at  public.cxo.com/ 
awards/otw_2009_application.html.  Candidates  may  also  nominate 
themselves  or  be  nominated  by  another,  but  all  nominations  must  be 
endorsed  by  a  CIO. 

A  panel  of  leading  CIOs  will  judge  the  nominees  and  choose  the 
winners,  who  will  be  featured  in  a  special  May  2009  issue  of  CIO 
and  online  at  CIO.com. 


Winners  will  also  be  honored  at 
the  fifth  annual  CIO  Leadership 
Event  to  take  place  May  3-5, 
2009,  at  the  Sawgrass  Golf  Resort 
and  Spa,  Vedra  Beach,  Fla. 

Don't  Be  Late  We  will  accept  nominations 

through  November  16. 

For  more  about  this  prestigious 
award,  go  to  www.cio.com/ 
cio-awards. 


Be  Seen 


Produced  by 


BUSINESS  TECHNOLOGY  LEADERSHIP 


In  partnership  with  sister  organization 

EHD  CIO  Executive  Council 

Leaders  Shaping  the  Future  of  Business 


DATApoints _ 

COMPILED  BY  JARINA  D’AURIA 


NO  RESULTS  FOUND 

69% 

Workers  who  say  that  less  than  half  of  their  company's 
enterprise  information  is  searchable  online 

AIIM 


RISKING  BUSINESS 


[42°/o] 

Insurers  who  are  confident 
their  companies  have  nailed 
enterprise  risk  management 

PricewaterhouseCoopers 


PUTT 

YOUR  WAY 
TO  THE  TOP 

Whose  careers  have  benefited  from  golf? 

56<>/o  OF  I.T.  EXECUTIVES 


HIGH-TECH, 

BIGGER 

PAYCHECK 

87% 

Average  gap  between  annual 
salaries  of  U.S,  high-tech  workers 
and  other  private-sector  workers 

American  Electronics  Association 


73%  OF  BUSINESS 
EXECUTIVES 

93%  OF  SALES 
EXECUTIVES 

CIO  Research 


COMMERCE-FREE  ZONE 


71% 


Consumers  who  will  not  even 
consider  online  banking  or  shopping 
with  their  mobile  devices 

Unisys 


WHEN  IS  I.T.  JUST  RIGHT? 


33%  of  users  think  their  company  embraces 
new  technologies  too  slowly. 

20%  think  they're  going  too  fast. 

Gartner 
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Veri70nwireless 


Don't  Push  Your  Luck 
With  Your  Push  To  Talk. 

MAKE  THE  SWITCH  TO  VERIZON  WIRELESS. 

Make  your  business  instantly  more  productive  by  upgrading  to  the  only  Push  to  Talk  service 
that  comes  with  the  Verizon  Wireless  Network  and  its  reliable  voice  service,  coast-to-coast 
coverage  and  24/7  customer  service.  Verizon  Wireless.  The  smart  choice  for  Push  to  Talk. 


motorola 

adventurev75o 


Let  Verizon  Wireless  be  your  "go-to"guy  for  Push  to  Talk  you  can  count  on. 


Call  1 .800.VZW.4BIZ  Clickverizonwireless.com/pushtotalk  Visit  a  Verizon  Wireless  store 


Push  to  Talk  is  available  only  with  other  VZW  Push  to  Talk  subscribers;  coverage  not  available  everywhere.  ©  2008  Verizon  Wireless. 


When  40  million  customers  show  up  at  Dell.com, 

who  helps  greetlhemialthe  door? 


